fullstack-nextjs-app-template
fullstack-nextjs-app-template copied to clipboard
possible vulnerability in Logger.js
In Logger.js file it does not do any sanity check for file-path, file or arg. Even though the file is not directly accessible from the client side, it's always a good practice to sanitize any inputs. If external input somehow was able to influence any of these variables, it could lead to command injection attacks.
Thanks ! logger.js is just a demo, it is not used and it is not a full code. Need to update it?