Clear table for express-postgres

Adds ability to clear table contents with a single click
AikidoSec · Mar 8, 2024 · 591bc4c · 591bc4c
1 parent a949ac9
commit 591bc4c
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/sample-apps/express-postgres/app.js b/sample-apps/express-postgres/app.js
@@ -21,7 +21,7 @@ function getHTMLBody(cats) {
       <input type="text" name="petname">
       <input type="submit" value="Add" />
     </form>
-    <a href="http://localhost:4000/?petname=Kitty'); DELETE FROM cats;-- H">Test injection</a>
+    <a href="http://localhost:4000/?petname=Kitty'); DELETE FROM cats;-- H">Test injection</a> / <a href="http://localhost:4000/clear">Clear table</a>
   </body>
 </html>`;
 }
@@ -64,6 +64,11 @@ async function main(port) {
     })
   );
 
+  app.get("/clear", asyncHandler(async (req, res) => {
+    await db.query("DELETE FROM cats;");
+    res.redirect("/");
+  }));
+
   return new Promise((resolve, reject) => {
     try {
       app.listen(port, () => {