import express from 'express'; import { WebView } from 'react-native'; var app = express(); app.get('/some/path', function(req, res) { let tainted = req.param("code"); // $ Source[js/code-injection] ; // $ Alert[js/code-injection] let wv = ; wv.injectJavaScript(tainted); // $ Alert[js/code-injection] });