JS: Include a local step before store step

2026-04-30 11:15:13 +02:00 · 2023-04-27 17:56:20 +02:00
parent c674afb674
commit 0fb79bdf64
1 changed files with 2 additions and 1 deletions
--- a/javascript/ql/lib/semmle/javascript/frameworks/Express.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Express.qll
@@ -216,7 +216,8 @@ module Express {
        Http::routeHandlerStep(result, succ) and
        t = t2
        or
-        DataFlow::SharedFlowStep::storeStep(result, succ, DataFlow::PseudoProperties::arrayElement()) and
+        DataFlow::SharedFlowStep::storeStep(result.getALocalUse(), succ,
+          DataFlow::PseudoProperties::arrayElement()) and
        t = t2.continue()
      )
    }