hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 03:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Update score and add CWE-730 to LoopBoundInjection

Browse Source 
This is a denial-of-service query, but was missing the CWE-730 tag
("denial of service") and consequently had a lower score than the
other DoS queries.
This commit is contained in:
Asger Feldthaus
2021-10-05 08:42:41 +02:00
parent 682a71176d
commit c4e8af983a
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
javascript/ql/src/Security/CWE-834/LoopBoundInjection.ql
View File

@@ -4,10 +4,11 @@
* property can cause indefinite looping.
* @kind path-problem
* @problem.severity warning
* @security-severity 6.5
* @security-severity 7.5
* @id js/loop-bound-injection
* @tags security
* external/cwe/cwe-834
* external/cwe/cwe-730
* @precision high
*/