Server Side Request Forgery in /app/controllers/API/tricks.js

Server Side Request Forgery in /app/controllers/API/tricks.js

Fixability: we don't have available fix now
Overview:
Bad function found 'request' that calls bad var Url

express4-bootstrap-starter/app/controllers/API/tricks.js

Lines 135 to 153 in 1615805

	request(Url, function (error, response, body) {
	if (!error && response.statusCode == 200) {
	screenshot(Url)
	.width(1280)
	.height(800)
	.capture(function(err, img) {
	if (err) {
	renderDefaultImage(res)
	// throw err;
	}
	res.set('Content-Type', 'image/png');
	res.send(new Buffer(img));
	});
	} else {
	renderDefaultImage(res);
	}
	})

_{refrence id: 899515800519217815}
What do you want me to do next?
details@shieldfy details
ignore@shieldfy ignore ?