Merge pull request #3356 from semgrep/fix-sqli-source

Fix source in tainted-sql-string

javascript/express/security/injection/tainted-sql-string.yaml

@@ -35,13 +35,7 @@ rules:
   pattern-sources:
   - patterns:
     - pattern-either:
-      - pattern-inside: function ... ($REQ, $RES) {...}
-      - pattern-inside: function ... ($REQ, $RES, $NEXT) {...}
-      - pattern-inside: $APP.$METHOD(..., function $FUNC($REQ, $RES) {...})
-      - pattern-inside: $APP.$METHOD(..., function $FUNC($REQ, $RES, $NEXT) {...})
-    - metavariable-regex:
-        metavariable: $METHOD
-        regex: ^(get|post|put|head|delete|options)$
+      - pattern-inside: function ... (...,$REQ, ...) {...}
     - pattern-either:
       - pattern: $REQ.query
       - pattern: $REQ.body
@@ -50,11 +44,11 @@ rules:
       - pattern: $REQ.headers
   - patterns:
     - pattern-either:
-      - pattern-inside: |
-          ({ $REQ }: Request,$RES: Response, $NEXT: NextFunction) =>
+      - pattern-inside: >
+          (...,{ $REQ }: Request,...) =>
           {...}
       - pattern-inside: |
-          ({ $REQ }: Request,$RES: Response) => {...}
+          (...,{ $REQ }: $EXPRESS.Request,...) => {...}
     - focus-metavariable: $REQ
     - pattern-either:
       - pattern: params