36 lines
796 B
Plaintext
36 lines
796 B
Plaintext
include::../description.adoc[]
|
|
|
|
include::../ask-yourself.adoc[]
|
|
|
|
include::../recommended.adoc[]
|
|
|
|
== Sensitive Code Example
|
|
|
|
----
|
|
// The process object is a global that provides information about, and control over, the current Node.js process
|
|
// All uses of process.stdin are security-sensitive and should be reviewed
|
|
|
|
process.stdin.on('readable', () => {
|
|
const chunk = process.stdin.read(); // Sensitive
|
|
if (chunk !== null) {
|
|
dosomething(chunk);
|
|
}
|
|
});
|
|
|
|
const readline = require('readline');
|
|
readline.createInterface({
|
|
input: process.stdin // Sensitive
|
|
}).on('line', (input) => {
|
|
dosomething(input);
|
|
});
|
|
----
|
|
|
|
include::../see.adoc[]
|
|
|
|
ifdef::env-github,rspecator-view[]
|
|
== Comments And Links
|
|
(visible only on this page)
|
|
|
|
include::comments-and-links.adoc[]
|
|
endif::env-github,rspecator-view[]
|