hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 01:33:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

Python: Add change note and set precision

Browse Source
This commit is contained in:
Rasmus Lerchedahl Petersen
2021-09-14 13:45:51 +02:00
parent 1c7982b319
commit c2d2037726
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/change-notes/2021-09-14-promote-regex-injection.md Normal file
View File

@@ -0,0 +1,2 @@
lgtm,codescanning
* The externally contributed query `py/regex-injection` has been promoted out of the experimental area. Results from this query are now available by default.

2
python/ql/src/Security/CWE-730/RegexInjection.ql
View File

@@ -5,13 +5,13 @@
* exponential time on certain inputs.
* @kind path-problem
* @problem.severity error
* @precision high
* @id py/regex-injection
* @tags security
* external/cwe/cwe-730
* external/cwe/cwe-400
*/
// determine precision above
import python
private import semmle.python.Concepts
import semmle.python.security.injection.RegexInjection