Express middleware that automatically detects parameter pollution and prevents the attack for you.
npm install express-parameter-pollutionjs
const parameterPollution = require("express-parameter-pollution");
app.use(parameterPollution());
`
$3
Express Parameter Pollution offers you few customizations, like toggling logging and adding your own function for handling parameter pollution requests.
`js
const parameterPollution = require("express-parameter-pollution");
app.use(parameterPollution({
log: true,
handler: (req, res, next) => {
res.send("Hello there user! Please stop trying to launch parameter pollution attack against our website!");
}
})):
`
$3
Express Parameter Pollution offers you few customizations, like toggling logging and adding your own function for handling parameter pollution requests.
`js
const express = require("express");
const parameterPollution = require("express-parameter-pollution");
const app = express();
app.use(parameterPollution());
app.use("*", (req, res) => {
if(Object.keys(req.query).length) {
let responseString = "You sent following parameters:
";
for(let key in req.query) {
responseString += ${key}: ${req.query[key].replace("Bob", "Alice")};
}
return res.send(responseString);
}
res.send("Regular request
Parameter Pollution Request");
});
app.listen(3001, () => {
console.log("Test server listening at port 3001");
});
``