Merge pull request #2981 from asger-semmle/js/lower-syntax-error-severity

Approved by max-schaefer
This commit is contained in:
semmle-qlci
2020-03-05 09:47:56 +00:00
committed by GitHub
2 changed files with 3 additions and 2 deletions

View File

@@ -62,6 +62,7 @@
| Missing CSRF middleware (`js/missing-token-validation`) | Fewer false positive results | The query reports fewer duplicates and only flags handlers that explicitly access cookie data. |
| Uncontrolled data used in path expression (`js/path-injection`) | More results | This query now recognizes additional ways dangerous paths can be constructed and used. |
| Uncontrolled command line (`js/command-line-injection`) | More results | This query now recognizes additional ways of constructing arguments to `cmd.exe` and `/bin/sh`. |
| Syntax error (`js/syntax-error`) | Lower severity | This results of this query are now displayed with lower severity. |
## Changes to libraries

View File

@@ -2,12 +2,12 @@
* @name Syntax error
* @description A piece of code could not be parsed due to syntax errors.
* @kind problem
* @problem.severity error
* @problem.severity recommendation
* @id js/syntax-error
* @tags reliability
* correctness
* language-features
* @precision high
* @precision very-high
*/
import javascript