import javascript

import semmle.javascript.security.dataflow.TaintedPathQuery

import DataFlow::DeduplicatePathGraph<TaintedPathFlow::PathNode, TaintedPathFlow::PathGraph>

from PathNode source, PathNode sink

where TaintedPathFlow::flowPath(source.getAnOriginalPathNode(), sink.getAnOriginalPathNode())

select sink.getNode(), source, sink, "This path depends on a $@.", source.getNode(),

"user-provided value"