JS: Add test with route.ts outside 'api'

asgerf · asgerf · commit f52f5b63e67f · 2025-11-26T11:16:09.000+01:00
diff --git a/javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/app/blah/route.ts b/javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/app/blah/route.ts
@@ -0,0 +1,4 @@
+export async function GET(req: Request) {
+    const url = req.url; // $ MISSING: Source
+    return new Response(url, { headers: { "Content-Type": "text/html" } }); // $ MISSING: Alert
+}
