codeql/javascript/ql/test/query-tests/Security/CWE-022/TaintedPath/torrents.js

const parseTorrent = require('parse-torrent'),
      fs = require('fs');

function getTorrentData(dir, torrent){
	let name = parseTorrent(torrent).name,
	    loc = dir + "/" + name + ".torrent.data";
	return fs.readFileSync(loc); // NOT OK
}