hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 03:06:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

python: drop precision and add severity score

Browse Source 
Given both the original FP score and our concerns
regarding sanitizers, `@precision medium`, which
is aligned with other languages, feels appropriate.
This commit is contained in:
Rasmus Lerchedahl Petersen
2022-02-01 10:34:36 +01:00
parent 7511b33512
commit 26befebfc2
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
python/ql/src/Security/CWE-117/LogInjection.ql
View File

@@ -4,7 +4,8 @@
* insertion of forged log entries by a malicious user. * insertion of forged log entries by a malicious user.
* @kind path-problem * @kind path-problem
* @problem.severity error * @problem.severity error
* @precision high * @security-severity 7.8
* @precision medium
* @id py/log-injection * @id py/log-injection
* @tags security * @tags security
* external/cwe/cwe-117 * external/cwe/cwe-117