hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-22 19:56:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update security-severity scores

Browse Source
This commit is contained in:
Calum Grant
2021-06-15 13:25:17 +01:00
parent 19305a217a
commit 771e686946
343 changed files with 343 additions and 343 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/Electron/AllowRunningInsecureContent.ql
View File

@@ -3,7 +3,7 @@
* @description Enabling allowRunningInsecureContent can allow remote code execution.
* @kind problem
* @problem.severity error
* @security-severity 5.9
* @security-severity 8.8
* @precision very-high
* @tags security
* frameworks/electron

2
javascript/ql/src/Electron/DisablingWebSecurity.ql
View File

@@ -3,7 +3,7 @@
* @description Disabling webSecurity can cause critical security vulnerabilities.
* @kind problem
* @problem.severity error
* @security-severity 2.9
* @security-severity 6.1
* @precision very-high
* @tags security
* frameworks/electron

2
javascript/ql/src/Electron/EnablingNodeIntegration.ql
View File

@@ -3,7 +3,7 @@
* @description Enabling `nodeIntegration` or `nodeIntegrationInWorker` can expose the application to remote code execution.
* @kind problem
* @problem.severity warning
* @security-severity 10.0
* @security-severity 9.3
* @precision low
* @id js/enabling-electron-renderer-node-integration
* @tags security