Skip to content

make non-exploitable examples exploitable - #1

Merged
StackOverflowIsBetterThanAnyAI merged 1 commit into
mainfrom
make-examples-exploitable
Oct 30, 2026
Merged

StackOverflowIsBetterThanAnyAI merged 1 commit into
mainfrom
make-examples-exploitable

Conversation

@StackOverflowIsBetterThanAnyAI

Copy link
Copy Markdown
Owner
  • CWE-258: empty config password now grants admin login
  • CWE-312: credit card number stored in cleartext cookie
  • CWE-561: dead branch makes ban check unreachable
  • CWE-563: unused sanitized value leads to XSS

- CWE-258: empty config password now grants admin login
- CWE-312: credit card number stored in cleartext cookie
- CWE-561: dead branch makes ban check unreachable
- CWE-563: unused sanitized value leads to XSS

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Oct 30, 2026

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: cdd323b9-7d98-4e48-ae54-73e232b2e90a
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@StackOverflowIsBetterThanAnyAI
StackOverflowIsBetterThanAnyAI merged commit 77410da into main Oct 30, 2026
2 checks passed
Comment thread CWE-312/main.js

console.log(JSON.stringify(process.env))
const main = (creditCardNumber) => {
document.cookie = `creditCardNumber=${creditCardNumber}; path=/`
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants