python: drop precision and add severity score

Given both the original FP score and our concerns
regarding sanitizers, `@precision medium`, which
is aligned with other languages, feels appropriate.
This commit is contained in:
Rasmus Lerchedahl Petersen
2022-02-01 10:34:36 +01:00
parent 7511b33512
commit 26befebfc2

View File

@@ -4,7 +4,8 @@
* insertion of forged log entries by a malicious user.
* @kind path-problem
* @problem.severity error
* @precision high
* @security-severity 7.8
* @precision medium
* @id py/log-injection
* @tags security
* external/cwe/cwe-117