csrf

injured.js

const http = require('http');
const config = require('./config');
const port = config.port.injured;
const host = config.host;

http
  .createServer((req, res) => {
    console.log(req.headers.cookie);
    res.writeHead(200, {
      'Set-Cookie': host
    });
    res.end('hello world');
  })
  .listen(port, () => {
    console.log(`The Sever at ${port}`);
  });