codeql/javascript/ql/test/query-tests/Security/CWE-022/TaintedPath/execa.js

import { execa, $ } from 'execa';
import http from 'node:http'
import url from 'url'

http.createServer(async function (req, res) {
    let filePath = url.parse(req.url, true).query["filePath"][0]; // $ Source

    // Piping to stdin from a file
    await $({ inputFile: filePath })`cat` // $ Alert

    // Piping to stdin from a file
    await execa('cat', { inputFile: filePath });  // $ Alert

    // Piping Stdout to file
    await execa('echo', ['example3']).pipeStdout(filePath); // $ Alert

    // Piping all of command output to file
    await execa('echo', ['example4'], { all: true }).pipeAll(filePath); // $ Alert
});