持續安全測試與 CI/CD 管道
整合模擬系統

// 模擬 Node.js 漏洞原始碼範例
const express = require('express');
const mysql = require('mysql');
const app = express();

// 嚴重漏洞 1: 硬編碼極高敏感度的 API 金鑰 (AWS_SECRET_KEY)
const AWS_SECRET_KEY = "AKIAIOSFODNN7EXAMPLE/SECKEY";

const db = mysql.createConnection({
  host: "localhost",
  user: "root",
  password: "supersecretpassword"
});

// 嚴重漏洞 2: 直接拼接 SQL 語句 (SQL Injection 漏洞)
app.get('/api/user', (req, res) => {
  const userId = req.query.id;
  const sql = "SELECT * FROM users WHERE id = " + userId;
  
  db.query(sql, (err, result) => {
    if (err) throw err;
    res.json(result);
  });
});

// 嚴重漏洞 3: 反射型跨站指令碼漏洞 (Reflected XSS)
app.get('/welcome', (req, res) => {
  const name = req.query.name;
  res.send("<h1>歡迎, " + name + "!</h1>");
});

app.listen(3000, () => console.log('Server started...'));

// 模擬安全重構後的 Node.js 原始碼範例
const express = require('express');
const mysql = require('mysql2'); // 安全驅動套件
const helmet = require('helmet'); // 安全防護 Headers
const app = express();

app.use(helmet());

// 安全修復 1: 改用環境變量讀取金鑰，防原始碼庫外流洩露
const AWS_SECRET_KEY = process.env.AWS_SECRET_KEY;

const db = mysql.createPool({
  host: process.env.DB_HOST,
  user: process.env.DB_USER,
  password: process.env.DB_PASSWORD
});

// 安全修復 2: 使用參數化查詢 (Prepared Statements) 杜絕 SQL 注入
app.get('/api/user', (req, res) => {
  const userId = req.query.id;
  const sql = "SELECT * FROM users WHERE id = ?";
  
  db.execute(sql, [userId], (err, result) => {
    if (err) return res.status(500).json({ error: 'Database Error' });
    res.json(result);
  });
});

// 安全修復 3: 對用戶輸入實施轉義編碼 (XSS 跨站指令碼防禦)
const escapeHtml = require('escape-html');
app.get('/welcome', (req, res) => {
  const name = req.query.name;
  res.send("<h1>歡迎, " + escapeHtml(name) + "!</h1>");
});

app.listen(3000, () => console.log('Server started with secure config.'));