mirror of
https://github.com/github/codeql.git
synced 2025-12-20 10:46:30 +01:00
python: drop precision and add severity score
Given both the original FP score and our concerns regarding sanitizers, `@precision medium`, which is aligned with other languages, feels appropriate.
This commit is contained in:
@@ -4,7 +4,8 @@
|
||||
* insertion of forged log entries by a malicious user.
|
||||
* @kind path-problem
|
||||
* @problem.severity error
|
||||
* @precision high
|
||||
* @security-severity 7.8
|
||||
* @precision medium
|
||||
* @id py/log-injection
|
||||
* @tags security
|
||||
* external/cwe/cwe-117
|
||||
|
||||
Reference in New Issue
Block a user