diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Express.qll b/javascript/ql/lib/semmle/javascript/frameworks/Express.qll index d6cc1f7774a..0fdc7aa95aa 100644 --- a/javascript/ql/lib/semmle/javascript/frameworks/Express.qll +++ b/javascript/ql/lib/semmle/javascript/frameworks/Express.qll @@ -1077,9 +1077,7 @@ module Express { * An express route setup configured with the `cors` package. */ class CorsConfiguration extends DataFlow::MethodCallNode { - CorsConfiguration() { - this = appCreation().getAMethodCall("use") and this.getArgument(0) instanceof Cors::Cors - } + CorsConfiguration() { exists(Express::RouteSetup setup | this = setup | setup.isUseCall()) } Cors::Cors getArgument() { result = this.getArgument(0) }