Skip to content

Conversation

@stargazer4
Copy link
Contributor

@stargazer4 stargazer4 commented Jun 7, 2022

I've implemented changes please review

</body></html>`

date = new Date()
return ejs.render(template,{time: date.toLocaleTimeString()})

Check failure

Code scanning / CodeQL

Code injection

[User-provided value](1) flows to here and is interpreted as a template, which may contain code.
@stargazer4 stargazer4 changed the title Create super-secure-code-express-ejs.js Fix time rendered in application Jun 1, 2023
@stargazer4 stargazer4 changed the title Fix time rendered in application Fix date/time in application Jun 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant