DevSecOps 與 WAF 整合模擬系統

const express = require('express');
const mysql = require('mysql');
const app = express();

// 嚴重漏洞 1: 硬編碼高敏感度 API 金鑰
const AWS_SECRET_KEY = "AKIAIOSFODNN7EXAMPLE/SECKEY";

const db = mysql.createConnection({
  host: "localhost",
  user: "root",
  password: "supersecretpassword"
});

// 嚴重漏洞 2: 直接拼接 SQL 語句 (SQL Injection 漏洞)
app.get('/api/user', (req, res) => {
  const userId = req.query.id;
  const sql = "SELECT * FROM users WHERE id = " + userId;
  
  db.query(sql, (err, result) => {
    if (err) throw err;
    res.json(result);
  });
});

// 嚴重漏洞 3: 反射型跨站指令碼漏洞 (Reflected XSS)
app.get('/welcome', (req, res) => {
  const name = req.query.name;
  res.send("<h1>歡迎, " + name + "!</h1>");
});

const express = require('express');
const mysql = require('mysql2'); // 安全驅動套件
const helmet = require('helmet'); // 安全防護 Headers
const app = express();

app.use(helmet());

// 安全修復 1: 改用環境變數讀取金鑰
const AWS_SECRET_KEY = process.env.AWS_SECRET_KEY;

const db = mysql.createPool({
  host: process.env.DB_HOST,
  user: process.env.DB_USER,
  password: process.env.DB_PASSWORD
});

// 安全修復 2: 使用預編譯參數化查詢
app.get('/api/user', (req, res) => {
  const userId = req.query.id;
  const sql = "SELECT * FROM users WHERE id = ?";
  db.execute(sql, [userId], (err, result) => {
    if (err) return res.status(500).json({ error: 'Database Error' });
    res.json(result);
  });
});