mcp-server-semgrep/semgrep-rules/typescript/nestjs/security/audit/nestjs-header-xss-disabled.ts

MCP Server for Semgrep Integration - static code analysis with AI

import { Controller, Get, Header, Redirect, Query } from '@nestjs/common';
import { AppService } from './app.service';

// ruleid:nestjs-header-xss-disabled
@Controller()
export class AppController1 {
  constructor(private readonly appService: AppService) {}

  @Get('test1')
  @Header('X-XSS-Protection', '0')
  getHello1(): string {
    return this.appService.getHello();
  }

}

@Controller()
export class AppController2 {
  constructor(private readonly appService: AppService) {}

  @Get('test1')
  @Header('X-XSS-Protection', '1')
  getHello2(): string {
    return this.appService.getHello();
  }

}