Merge pull request github#13090 from kaspersv/kaspersv/js-prevent-regression

JS: Prevent join order regression

Author: erik-krogh

javascript/ql/lib/semmle/javascript/security/dataflow/SecondOrderCommandInjectionCustomizations.qll

@@ -117,6 +117,7 @@ module SecondOrderCommandInjection {
     int cmdIndex;
     int argIndex;
 
+    pragma[assume_small_delta]
     IndirectCmdFunc() {
       exists(CommandExecutingCall call |
         this.getParameter(cmdIndex).flowsTo(call.getCommandArg()) and