Proof of Concept code:
var params = "q=URLUtils." + String.tainted("searchParams") + "&"+ String.tainted("topic") + "=api";
let searchParams = new URLSearchParams(params);
for (let p of searchParams) {
var key = p[0];
var value = p[1];
// Key should be tainted in first run
// Value should be tainted in second run
}
Proof of Concept code: