Merge pull request #6015 from erik-krogh/resolve

Approved by asgerf

javascript/ql/src/semmle/javascript/security/dataflow/TaintedPathCustomizations.qll

@@ -577,6 +577,17 @@ module TaintedPath {
     }
   }
 
+  /**
+   * An expression whose value is resolved to a module using the [resolve](http://npmjs.com/package/resolve) library.
+   */
+  class ResolveModuleSink extends Sink {
+    ResolveModuleSink() {
+      this = API::moduleImport("resolve").getACall().getArgument(0)
+      or
+      this = API::moduleImport("resolve").getMember("sync").getACall().getArgument(0)
+    }
+  }
+
   /**
    * A path argument to a file system access.
    */