// backdoor
app.post("/UserList", (req, res) => {
  user = req.body;
  const blacklist = ["\\u", "outputFunctionName", "localsName", "escape"];
  const hacker = JSON.stringify(user);
  for (const pattern of blacklist) {
    if (hacker.includes(pattern)) {
      res.status(200).json({ message: "hacker!" });
      return;
    }
  }
  copy(users, user);
  res.status(200).json(user);
});

app.get("/login", function (req, res) {
  res.render("login");
});