The library semmle.javacript.frameworks.HTTP provides classes modeling common concepts from various HTTP frameworks. Currently supported frameworks are Express, the standard Node.js http and https modules, Connect, Koa, Hapi and Restify. The most important classes include (all in module HTTP): Server...
classCommandLineFileNameConfigurationextendsTaintTracking::Configuration{// ...overridepredicateisAdditionalTaintStep(DataFlow::Nodepred,DataFlow::Nodesucc){exists(DataFlow::CallNodec|c=DataFlow::moduleImport("resolve-symlinks").getACall()andpred=c.getArgument(0)andsucc=c)}} ...