codeql/javascript/ql/test/query-tests/Security/CWE-079/xss-through-torrent.js

const parseTorrent = require('parse-torrent'),
      express = require('express');

express().get('/user/:id', function(req, res) {
	let torrent = parseTorrent(unknown),
	    name = torrent.name;
	res.send(name); // NOT OK
});