codeql/javascript/ql/test/library-tests/InterProceduralFlow/tst4.js

(function(p) {
  let source = "tainted";

  function id(x) {
    return x;
  }

  function substr(x) {
    return x.substring(2);
  }

  var still_tainted = source.substring(2);
  p.also_tainted = still_tainted;

  let sink1 = id(still_tainted);
  let sink2 = p.also_tainted;
  let sink3 = substr(source);
});