Merge pull request #2497 from hvitved/csharp/remove-cp

C#: Remove a Cartesian product

csharp/ql/src/semmle/code/csharp/dataflow/internal/TaintTrackingPrivate.qll

@@ -117,6 +117,7 @@ private class LocalTaintExprStepConfiguration extends ControlFlowReachabilityCon
       e2 = any(OperatorCall oc |
           oc.getTarget().(ConversionOperator).fromLibrary() and
           e1 = oc.getAnArgument() and
+          scope = e2 and
           isSuccessor = true
         )
     )