Dylan Fixing Issues

[DefenderK]

No description provided.

[DefenderK]

⛔ Snyk checks have failed. 2 issues have been found so far.

Icon	Severity	Issues
	Critical	0
	High	2
	Medium	0
	Low	0

⛔ security/snyk check is complete. 1 issues have been found. (View Details)

✅ license/snyk check is complete. No issues have been found. (View Details)

⛔ code/snyk check is complete. 1 issues have been found. (View Details)

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[DefenderK]

  Cross-site Scripting (XSS)

Unsanitized input from an HTTP parameter flows into send, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).

Line 327 | CWE-79 | Priority score 806 | Learn more about this vulnerability

Data flow: 8 steps

Step 1 - 5

nodejs-goof/routes/index.js

Line 326 in e2b3df7

const userInput = req.query.name;

Step 6 - 8

nodejs-goof/routes/index.js

Line 327 in e2b3df7

res.send(`<h1>Hello ${userInput}</h1>`);