pwnfunction / next.js-flat-prototype-pollution Goto Github PK

let app = require("express")() // Load & create an Express server
let userData = {} // User data storage object
let credentials = {email: "[email protected]", password: "abcd"}
app.get("/addUser", (req, res) => {
  let {region, name, uuid} = req.query // Store query parameters into variables
  if (userData[region] === undefined) { // If that region isn't initialized:
    userData[region] = {} // Make it an empty object
  }
  userData[region][name] = uuid // Store the UUID under the name in the region
  res.send("Success!\n") // And send a success message.
})
app.get("/debug/getCurrentCredentials", (req, res) => {
  if (process.env.TESTING === "true") { // If the testing env variable is set:
    res.send(JSON.stringify(credentials) + "\n") // Send the credentials
  } else { // Or:
    res.status(403).send("Not allowed!\n") // Send an error
  }
})
app.listen(1337) // And run the server