mcp-server-semgrep/semgrep-rules/javascript/express/security/audit/express-check-directory-listing.js

MCP Server for Semgrep Integration - static code analysis with AI

const serveIndex = require('serve-index');
var express = require('express');
var app = express();

var serve = serveIndex('public/ftp', {
    icons: true
})

var server = http.createServer(function onRequest(req, res) {
    var done = finalhandler(req, res)
    // ruleid: express-check-directory-listing
    serve(req, res, function onNext(err) {
        if (err) return done(err)
        index(req, res, done)
    })
})

// ruleid: express-check-directory-listing
app.use('/ftp', serveIndex('ftp', {
    icons: true
}));

// ok
app.use(bodyParser.text({
    type: '*/*'
}));