mcp-server-semgrep/semgrep-rules/javascript/playwright/security/audit/playwright-evaluate-arg-injection.js

MCP Server for Semgrep Integration - static code analysis with AI

const { chromium } = require('playwright');

async function test3(userInput) {

  const browser = await chromium.launch();
  const page = await browser.newPage();

// ok
  await page.evaluate(x => console.log(x), 5);

  // ruleid:playwright-evaluate-arg-injection
  await page.evaluate(x => fetch(x), userInput);

  await page.screenshot({path: 'example.png'});
  await browser.close();
}