diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/MissingRateLimiting.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/MissingRateLimiting.qll index dcda29542f5..5f4ad1b3d73 100644 --- a/javascript/ql/lib/semmle/javascript/security/dataflow/MissingRateLimiting.qll +++ b/javascript/ql/lib/semmle/javascript/security/dataflow/MissingRateLimiting.qll @@ -115,12 +115,11 @@ abstract class RateLimitingMiddleware extends DataFlow::SourceNode { */ class ExpressRateLimit extends RateLimitingMiddleware { ExpressRateLimit() { - exists(API::Node rateLimitImport, API::Node rateLimit | - rateLimitImport = API::moduleImport("express-rate-limit") and - rateLimit in [rateLimitImport, rateLimitImport.getMember("rateLimit")] - | - this = rateLimit.getReturn().asSource() - ) + this = + [ + API::moduleImport("express-rate-limit"), + API::moduleImport("express-rate-limit").getMember("rateLimit") + ].getReturn().asSource() } }