diff --git a/queries/default-setup-event-context.ql b/queries/default-setup-event-context.ql index 27bd55af6..d0d3cbce1 100644 --- a/queries/default-setup-event-context.ql +++ b/queries/default-setup-event-context.ql @@ -25,7 +25,9 @@ class EventContextAccessConfiguration extends DataFlow::Configuration { } override predicate isSink(DataFlow::Node sink, DataFlow::FlowLabel lbl) { - sink instanceof DataFlow::PropRead and lbl instanceof ParsedLabel + sink instanceof DataFlow::PropRead and + lbl instanceof ParsedLabel and + not exists(DataFlow::PropRead n | sink = n.getBase()) } override predicate isAdditionalFlowStep(