Skip to content

Conversation

@robbiebise
Copy link

No description provided.

//});
app.post("/api/world", (req, res) => {
console.log(req.body);
res.send("You sent:" + req.body.post);

Check failure

Code scanning / SonarQube

Endpoints should not be vulnerable to reflected cross-site scripting (XSS) attacks

<!--SONAR_ISSUE_KEY:61beccb6-9573-4963-aa7f-67242c829f35-->Change this code to not reflect user-controlled data. <p>See more on <a href="https://nautilus.sonarqube.org/project/issues?id=SonarSource-Demos%5fjavascript-app%5fAYI8UgHPWHbe6%5f1YL8bt&branch=check-AI-detection&issues=61beccb6-9573-4963-aa7f-67242c829f35&open=61beccb6-9573-4963-aa7f-67242c829f35">SonarQube</a></p>
app.post("/api/world", (req, res) => {
console.log(req.body);
res.send("You sent:" + req.body.post);
axios.get('https://api.example.com/data')

Check failure

Code scanning / SonarQube

URLs should not not be hardcoded

<!--SONAR_ISSUE_KEY:efd5d980-462c-456a-b8dd-9abd1795bec7-->User-specified secrets should not be disclosed. <p>See more on <a href="https://nautilus.sonarqube.org/project/issues?id=SonarSource-Demos%5fjavascript-app%5fAYI8UgHPWHbe6%5f1YL8bt&branch=check-AI-detection&issues=efd5d980-462c-456a-b8dd-9abd1795bec7&open=efd5d980-462c-456a-b8dd-9abd1795bec7">SonarQube</a></p>
@sonar-nautilus
Copy link

sonar-nautilus bot commented Mar 3, 2025

Quality Gate failed Quality Gate failed

Failed conditions
1 New issue

See analysis details on SonarQube

Catch issues before they fail your Quality Gate with our IDE extension SonarQube IDE SonarQube IDE

@robbiebise robbiebise merged commit 1f29bf8 into main Mar 3, 2025
2 of 4 checks passed
app.post("/api/world", (req, res) => {
console.log(req.body);
res.send("You sent:" + req.body.post);
axios.get('https://api.example.com/data')

Check failure

Code scanning / SonarQube

URLs should not not be hardcoded Critical

User-specified secrets should not be disclosed. See more on SonarQube
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants