Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API related vulnerabilities.
GNU General Public License v3.0
442
stars
173
forks
source link
Errors are not handled properly in controllers/notebook.js #20
In various places in controllers/notebook.js, if there is error, the server will try to respond with both the error and the value that is supposed to be sent when there is no error. For example:
In various places in controllers/notebook.js, if there is error, the server will try to respond with both the error and the value that is supposed to be sent when there is no error. For example:
https://github.com/snoopysecurity/dvws-node/blob/master/controllers/notebook.js#L52![image](https://user-images.githubusercontent.com/349428/126284774-a6e3fb32-098f-4118-ae2d-2721c5d7e59d.png)
This will result in error: "Error: Can't set headers after they are sent." An "else" statement should be there to prevent such case.