Use config.getCorsConfiguration().getOrigin())

Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
github · erik-krogh · Jun 28, 2024 · Sep 29, 2023 · Sep 29, 2023 · Oct 2, 2023
commit 191766a47bf16653231f3dd843568d897878bdb2
@@ -68,6 +68,8 @@ module CorsPermissiveConfiguration {
    * The value of cors origin when initializing the application.
    */
   class ExpressCors extends Sink, DataFlow::ValueNode {
-    ExpressCors() { exists(Express::CorsConfiguration config | this = config.getOrigin()) }
+    ExpressCors() {
+      exists(Express::CorsConfiguration config | this = config.getCorsConfiguration().getOrigin())
+    }
   }
 }