diff --git a/javascript/ql/src/semmle/javascript/dataflow/TaintTracking.qll b/javascript/ql/src/semmle/javascript/dataflow/TaintTracking.qll index 2f42df61509..80d50b228af 100644 --- a/javascript/ql/src/semmle/javascript/dataflow/TaintTracking.qll +++ b/javascript/ql/src/semmle/javascript/dataflow/TaintTracking.qll @@ -833,9 +833,7 @@ module TaintTracking { override EqualityTest astNode; TypeOfCheck() { - exists(StringLiteral str, TypeofExpr typeof | - astNode.hasOperands(str, typeof) - | + exists(StringLiteral str, TypeofExpr typeof | astNode.hasOperands(str, typeof) | str.getValue() = "undefined" and typeof.getOperand() = x )