diff --git a/javascript/ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql b/javascript/ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql index 5aacf8f6cf9..d50fb54e1b6 100644 --- a/javascript/ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql +++ b/javascript/ql/src/Security/ClientSuppliedIpUsedInSecurityCheck.ql @@ -51,6 +51,6 @@ class ClientSuppliedIpUsedInSecurityCheckConfig extends TaintTracking::Configura from ClientSuppliedIpUsedInSecurityCheckConfig config, DataFlow::PathNode source, DataFlow::PathNode sink -where config.hasFlowPath(source, sink) +where none() select sink.getNode(), source, sink, "IP address spoofing might include code from $@.", source.getNode(), "this user input"