# The variable `data` exists in both functions, but only one is tainted. # A scope-aware analysis must flag handler_one and leave handler_two alone. def handler_one(prompt): data = input(prompt) # tainted source eval(data) # sink -> should be flagged def handler_two(prompt): data = "a constant value" # literal, NOT tainted eval(data) # same var name, must NOT be flagged