Taint flows that go through the access to a `req` property which is annotated in the `cds` file as of a numeric type can be sanitized