codeql/javascript/ql/test/query-tests/Security/CWE-022/views.js

module.exports = (req, res) => res.render(req.params[0]);