Skip to content

Commit

Permalink
typo
Browse files Browse the repository at this point in the history
  • Loading branch information
William Moody committed Mar 21, 2021
1 parent e6712ac commit 5f87f0d
Show file tree
Hide file tree
Showing 2 changed files with 1 addition and 3 deletions.
2 changes: 1 addition & 1 deletion README.md
Expand Up @@ -11,7 +11,7 @@

A small web app writen in Node.JS to practice NoSQLi and deserialization exploits.

Working exploits may be found in `./exploit`
Working exploits as well as explainations may be found in `./exploit`

## How to run locally

Expand Down
2 changes: 0 additions & 2 deletions app.js
Expand Up @@ -45,7 +45,6 @@ app.get('/', function(req, res) {
var draft = null;
if (req.cookies.draft) {
draft = serialize.unserialize(new Buffer(req.cookies.draft, 'base64').toString()).msg;
console.log(draft);
}
MongoClient.connect(db_url, { useNewUrlParser:true, useUnifiedTopology:true }, function(err, db) {
if (err) {
Expand Down Expand Up @@ -222,7 +221,6 @@ app.post('/send', function(req, res) {
} else if (save != null) {
console.log(' -- Save');
var cookie_val = Buffer.from(serialize.serialize({'msg':req.body.message})).toString('base64');
console.log(cookie_val);
res.cookie('draft',cookie_val,{maxAge:900000,httpOnly:true});
}
}
Expand Down

0 comments on commit 5f87f0d

Please sign in to comment.