diff --git a/javascript/ql/src/semmle/javascript/frameworks/HTTP.qll b/javascript/ql/src/semmle/javascript/frameworks/HTTP.qll index c15836e50d3..e552bbcb85c 100644 --- a/javascript/ql/src/semmle/javascript/frameworks/HTTP.qll +++ b/javascript/ql/src/semmle/javascript/frameworks/HTTP.qll @@ -275,7 +275,9 @@ module HTTP { exists(HTTP::RouteHandlerCandidateContainer container | pred = container.getRouteHandler(succ)) or // (function (req, res) {}).bind(this); - exists(DataFlow::PartialInvokeNode call | succ = call.getBoundFunction(pred, 0)) + exists(DataFlow::PartialInvokeNode call | + succ = call.getBoundFunction(any(DataFlow::Node n | pred.flowsTo(n)), 0) + ) } /**