Merge pull request #3752 from erik-krogh/limitStr

Approved by asgerf

Author: semmle-qlci

javascript/ql/src/semmle/javascript/Expr.qll

@@ -1519,7 +1519,8 @@ class AddExpr extends @addexpr, BinaryExpr {
   override string getOperator() { result = "+" }
 
   override string getStringValue() {
-    result = getLeftOperand().getStringValue() + getRightOperand().getStringValue()
+    result = getLeftOperand().getStringValue() + getRightOperand().getStringValue() and
+    result.length() < 1000 * 1000
   }
 }