jaydenlin/ssrf_demo.js

## ssrf_demo.js
app.post(`/api/:userId/posts`, async (req, res) => {
    const token = await tokenService.getToken(req);
    const response = await api.post(`http://internal.corp.com/${req.params.userId}/posts?message=${req.query.message}&token=${token}`);
    return res.send(response.data);
});
	app.post(`/api/:userId/posts`, async (req, res) => {
	const token = await tokenService.getToken(req);
	const response = await api.post(`http://internal.corp.com/${req.params.userId}/posts?message=${req.query.message}&token=${token}`);
	return res.send(response.data);
	});