Skip to content

Commit 4dfc068

Browse files
committed
support non SourceNode receiver for partialInvoke in routeHandlerStep
1 parent 4cde48c commit 4dfc068

File tree

1 file changed

+3
-1
lines changed
  • javascript/ql/src/semmle/javascript/frameworks

1 file changed

+3
-1
lines changed

javascript/ql/src/semmle/javascript/frameworks/HTTP.qll

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -275,7 +275,9 @@ module HTTP {
275275
exists(HTTP::RouteHandlerCandidateContainer container | pred = container.getRouteHandler(succ))
276276
or
277277
// (function (req, res) {}).bind(this);
278-
exists(DataFlow::PartialInvokeNode call | succ = call.getBoundFunction(pred, 0))
278+
exists(DataFlow::PartialInvokeNode call |
279+
succ = call.getBoundFunction(any(DataFlow::Node n | pred.flowsTo(n)), 0)
280+
)
279281
}
280282

281283
/**

0 commit comments

Comments
 (0)