import python

import semmle.python.security.dataflow.PathInjectionQuery

import PathInjectionFlow::PathGraph

from PathInjectionFlow::PathNode source, PathInjectionFlow::PathNode sink

where PathInjectionFlow::flowPath(source, sink)

select sink.getNode(), source, sink, "This path depends on a $@.", source.getNode(),

"user-provided value"