We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 4cde48c commit 4dfc068Copy full SHA for 4dfc068
javascript/ql/src/semmle/javascript/frameworks/HTTP.qll
@@ -275,7 +275,9 @@ module HTTP {
275
exists(HTTP::RouteHandlerCandidateContainer container | pred = container.getRouteHandler(succ))
276
or
277
// (function (req, res) {}).bind(this);
278
- exists(DataFlow::PartialInvokeNode call | succ = call.getBoundFunction(pred, 0))
+ exists(DataFlow::PartialInvokeNode call |
279
+ succ = call.getBoundFunction(any(DataFlow::Node n | pred.flowsTo(n)), 0)
280
+ )
281
}
282
283
/**
0 commit comments