From 3bcb411d1af77e7c7c89bc5b00a4bbf28efb006e Mon Sep 17 00:00:00 2001
From: Maiky <76447395+maikypedia@users.noreply.github.com>
Date: Mon, 27 Nov 2023 20:31:19 +0200
Subject: [PATCH] Using `Express::RouteSetup`

---
 javascript/ql/lib/semmle/javascript/frameworks/Express.qll | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/javascript/ql/lib/semmle/javascript/frameworks/Express.qll b/javascript/ql/lib/semmle/javascript/frameworks/Express.qll
index d6cc1f7774a..0fdc7aa95aa 100644
--- a/javascript/ql/lib/semmle/javascript/frameworks/Express.qll
+++ b/javascript/ql/lib/semmle/javascript/frameworks/Express.qll
@@ -1077,9 +1077,7 @@ module Express {
    * An express route setup configured with the `cors` package.
    */
   class CorsConfiguration extends DataFlow::MethodCallNode {
-    CorsConfiguration() {
-      this = appCreation().getAMethodCall("use") and this.getArgument(0) instanceof Cors::Cors
-    }
+    CorsConfiguration() { exists(Express::RouteSetup setup | this = setup | setup.isUseCall()) }
 
     Cors::Cors getArgument() { result = this.getArgument(0) }