codeql/javascript/ql/test/library-tests/TaintTracking/implied-receiver.js

import 'dummy';

function Foo() {
    this.foo = source();
    var obj = {
        bar: function() {
            sink(this.foo); // NOT OK
        }
    };
    Object.assign(this, obj);
}