codeql/javascript/ql/test/query-tests/Security/CWE-400/ReDoS/lib/indirect.js

module.exports.foo = function (x) {
    /k*h/.test(x); // NOT OK
}