CodeQL Alert #45: Reflected server-side cross-site scripting

Code Snippet

    </html>
    """
    
    return html

@app.route('/search')
def search():

Classification: demo-only

This file is prefixed with vulnerable_ and is an intentionally insecure demo file for CodeQL demonstration purposes.

Generated by automated security triage on 2026-03-25.