-
Notifications
You must be signed in to change notification settings - Fork 13
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Current balance #325
Current balance #325
Conversation
… current_balance
const response = await axios(options); | ||
const expandedUrl = response.request.res.responseUrl || shortUrl; | ||
const parsedUrl = new URL(expandedUrl); | ||
const response = await axios(options) |
Check failure
Code scanning / CodeQL
Server-side request forgery
let campaignLink = await CampaignLink.findOne({ | ||
_id: idLink, | ||
}).lean() |
Check failure
Code scanning / CodeQL
Database query built from user-controlled sources
) | ||
let updatedFUnds = { ...copyStats } | ||
|
||
let cmpLink = await CampaignLink.findOne({ id_prom: idProm }).lean() |
Check failure
Code scanning / CodeQL
Database query built from user-controlled sources
: new Big(cmpLink.payedAmount).plus(new Big(amount)).toFixed() | ||
updatedFUnds.type = 'already_recovered' | ||
await CampaignLink.updateOne( | ||
{ id_prom: idProm }, |
Check failure
Code scanning / CodeQL
Database query built from user-controlled sources
const ipfs = await ipfsConnect() | ||
|
||
// READ FILE | ||
const x = fs.readFileSync(req.file.path) |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression
let result = await ipfs.add({ content: buffer }) | ||
|
||
// REMOVE FILE FROM UPLOADS DIR | ||
fs.unlinkSync('uploads/' + req.file.filename) |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression
No description provided.