Better HostnameVerificationCall.isIgnored()

Author: artem-smotrakov

java/ql/src/experimental/Security/CWE/CWE-297/IgnoredHostnameVerification.ql

@@ -22,9 +22,9 @@ private class HostnameVerificationCall extends MethodAccess {
 
   /** Holds if the result of the call is not used. */
   predicate isIgnored() {
-    not exists(Expr expr, IfStmt ifStmt, MethodAccess ma |
-      this = [expr.getAChildExpr(), ifStmt.getCondition(), ma.getAnArgument()]
-    )
+    not exists(Expr expr | this = expr.getAChildExpr()) and
+    not exists(IfStmt ifStmt | this = ifStmt.getCondition()) and
+    this = any(ExprStmt es).getExpr()
   }
 }