codeql/javascript/ql/test/library-tests/frameworks/Nest/local/customPipe.ts

import { Get, Injectable, PipeTransform, Query, UsePipes } from '@nestjs/common';
  
@Injectable()
export class CustomSanitizingPipe implements PipeTransform {
    transform(value: string): number | undefined {
        if (value == null) return undefined;
        return Number(value);
    }
}

@Injectable()
export class CustomPropagatingPipe implements PipeTransform {
    transform(value: string): string {
        return value.toUpperCase() + '!';
    }
}

export class Controller {
    @Get()
    sanitizingPipe1(@Query('x', CustomSanitizingPipe) sanitized: number): string {
        return '' + sanitized; // OK
    }

    @Get()
    sanitizingPipe2(@Query('x', new CustomSanitizingPipe()) sanitized: number): string {
        return '' + sanitized; // OK
    }

    @Get()
    @UsePipes(CustomSanitizingPipe)
    sanitizingPipe3(@Query('x') sanitized: number): string {
        return '' + sanitized; // OK
    }

    @Get()
    propagatingPipe1(@Query('x', CustomPropagatingPipe) unsanitized: string): string {
        return '' + unsanitized; // NOT OK
    }

    @Get()
    propagatingPipe2(@Query('x', new CustomPropagatingPipe()) unsanitized: string): string {
        return '' + unsanitized; // NOT OK
    }

    @Get()
    @UsePipes(CustomPropagatingPipe)
    propagatingPipe3(@Query('x') unsanitized: string): string {
        return '' + unsanitized; // NOT OK
    }
}