diff --git a/tracer/src/Datadog.Trace/Iast/Aspects/System.Web.Extensions/JavaScriptSerializerAspects.cs b/tracer/src/Datadog.Trace/Iast/Aspects/System.Web.Extensions/JavaScriptSerializerAspects.cs index c04ebef7bef7..864eb5a40596 100644 --- a/tracer/src/Datadog.Trace/Iast/Aspects/System.Web.Extensions/JavaScriptSerializerAspects.cs +++ b/tracer/src/Datadog.Trace/Iast/Aspects/System.Web.Extensions/JavaScriptSerializerAspects.cs @@ -54,7 +54,7 @@ public class JavaScriptSerializerAspects return result; } - TaintObject(result); + TaintObject(result, taintedObjects); } catch (Exception ex) { @@ -64,19 +64,18 @@ public class JavaScriptSerializerAspects return result; } - private static void TaintObject(object obj) + private static void TaintObject(object obj, TaintedObjects taintedObjects) { switch (obj) { case string str: - var taintedObjects = IastModule.GetIastContext()?.GetTaintedObjects(); - taintedObjects?.Taint(obj, [new Range(0, str.Length)]); + taintedObjects.Taint(obj, [new Range(0, str.Length)]); break; case Dictionary objects: foreach (var item in objects) { - TaintObject(item.Value); + TaintObject(item.Value, taintedObjects); } break; @@ -84,7 +83,7 @@ private static void TaintObject(object obj) case object[] objects: foreach (var item in objects) { - TaintObject(item); + TaintObject(item, taintedObjects); } break;