You'll love taint checking then.

https://en.wikipedia.org/wiki/Taint_checking

https://semgrep.dev/docs/writing-rules/data-flow/taint-mode/...