Add security-severity metadata

javascript/ql/src/AngularJS/DisablingSce.ql

@@ -3,11 +3,13 @@
  * @description Disabling strict contextual escaping (SCE) can cause security vulnerabilities.
  * @kind problem
  * @problem.severity warning
+ * @security-severity 5.9
  * @precision very-high
  * @id js/angular/disabling-sce
  * @tags security
  *       maintainability
  *       frameworks/angularjs
+ *       external/cwe/cwe-116
  */
 
 import javascript

javascript/ql/src/AngularJS/DoubleCompilation.ql

@@ -4,10 +4,12 @@
  *              unexpected behavior of directives, performance problems, and memory leaks.
  * @kind problem
  * @problem.severity warning
+ * @security-severity 5.9
  * @id js/angular/double-compilation
  * @tags reliability
  *       frameworks/angularjs
  *       security
+ *       external/cwe/cwe-1176
  * @precision very-high
  */
 

javascript/ql/src/AngularJS/InsecureUrlWhitelist.ql

@@ -3,6 +3,7 @@
  * @description URL whitelists that are too permissive can cause security vulnerabilities.
  * @kind problem
  * @problem.severity warning
+ * @security-severity 6.4
  * @precision very-high
  * @id js/angular/insecure-url-whitelist
  * @tags security