XS_CSRF @ /src/sample.xsjs

[thtri]

XS_CSRF issue exists @ sample.xsjs in branch main

Method at line 85 of /src/sample.xsjs gets a parameter from a user request from get. This parameter value flows through the code and is eventually used to access application state altering functionality. This may enable Cross-Site Request Forgery (CSRF).

Namespace: thtri
Repository: cx1-test-feedback-app
Repository Url: https://github.com/thtri/cx1-test-feedback-app
CxAST-Project: thtri/cx1-test-feedback-app
CxAST platform scan: d9bb4146-322f-4d77-9ac6-7a858eaa2c1a
Branch: main
Application: cx1-test-feedback-app
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
CWE: 352
Lines: 85

---

References
Read more