If host is omitted, the server will accept connections on the unspecified IPv6 address (::) when IPv6 is available, or the unspecified IPv4 address (0.0.0.0) otherwise.
What does this rule intend to find?
Examples or references
const express = require('express')
const app = express()
const port = 3000
app.get('/dangerous', (req, res) => {
/* [...] */
console.log("Access to dangerous function: "+req.ip);
/* [...] */
});
app.listen(port, () => console.log(`Example app listening on port ${port}!`))
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
Rule Description
app listen without host:
What does this rule intend to find?
Examples or references
Put an example or references here
http://expressjs.com/en/5x/api.html#app.listen https://nodejs.org/api/net.html#serverlistenport-host-backlog-callback
Additional information
More information that would help someone write this rule!
PR Checklist