Update javascript/ql/lib/semmle/javascript/frameworks/Express.qll

Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
Asger F
2021-12-14 13:36:56 +01:00
committed by Asger Feldthaus
parent b2016bddac
commit c1bb40f439

View File

@@ -106,12 +106,12 @@ module Express {
* require('express-limiter')(app, client)({ method: 'get', path: '/foo' });
* ```
*/
private class RateLimiterRouteSetup extends Routing::RouteSetup::Range {
private class RateLimiterRouteSetup extends Routing::RouteSetup::Range, DataFlow::CallNode {
DataFlow::CallNode limitCall;
RateLimiterRouteSetup() {
limitCall = DataFlow::moduleImport("express-limiter").getACall() and
exists(this.(DataFlow::CallNode).getOptionArgument(0, ["path", "method"])) and
exists(this.getOptionArgument(0, ["path", "method"])) and
this = limitCall.getACall()
}