nyx/tests/fixtures/cross_file_context_sanitizer/security.js

// Cross-file sanitizer: delegates to the `xss` library, which is a
// registered HTML_ESCAPE sanitiser in the JS label rules.  The
// wrapping function itself is user-defined, so resolution must go
// through either the cross-file SSA summary (StripBits(HTML_ESCAPE))
// or the cross-file inline path to clear the taint.

const xss = require('xss');

function xssSafe(s) {
    return xss(String(s));
}

module.exports = { xssSafe };