codeql/javascript/ql/test/query-tests/Security/CWE-776/jquery.js

function test() {
  var src = document.location.search;

  // NOT OK: jQuery expands internal entities by default
  $.parseXML(src);
}