codeql/javascript/ql/test/query-tests/Security/CWE-451/express-good-router.js

var express = require('express'),
    app = express();
var router = express.Router();

router.get('/', function (req, res) {
    res.set('X-Frame-Options', 'DENY')
});

app.use('/router', router);