import javascript

import semmle.javascript.security.dataflow.CodeInjectionQuery

import CodeInjectionFlow::PathGraph

from CodeInjectionFlow::PathNode source, CodeInjectionFlow::PathNode sink

where CodeInjectionFlow::flowPath(source, sink)

select sink.getNode(), source, sink, sink.getNode().(Sink).getMessagePrefix() + " depends on a $@.",

source.getNode(), "user-provided value"