Open
Description
Describe the bug
express_xss is detected in a code that has sanitization
To Reproduce
https://semgrep.dev/playground/r/x8UKwxb/767vnb.express_xss
Expected behavior
No detection
What is the priority of the bug to you?
- P1: important to fix or quite annoying
Environment
Using semgrep.dev
Use case
What will fixing this bug enable for you?
Better detection, less noise