Merge pull request #10136 from atorralba/atorralba/redos-cwe-tag

Java: Add CWE-1333 tag to Java ReDoS queries
2026-04-28 02:05:14 +02:00 · 2022-08-23 11:07:51 +02:00
parent ac79866799 6b4cfbbacd
commit e3c1101b79
3 changed files with 6 additions and 0 deletions
--- a/java/ql/src/Security/CWE/CWE-730/PolynomialReDoS.ql
+++ b/java/ql/src/Security/CWE/CWE-730/PolynomialReDoS.ql
@@ -8,6 +8,7 @@
 * @precision high
 * @id java/polynomial-redos
 * @tags security
+ *       external/cwe/cwe-1333
 *       external/cwe/cwe-730
 *       external/cwe/cwe-400
 */
--- a/java/ql/src/Security/CWE/CWE-730/ReDoS.ql
+++ b/java/ql/src/Security/CWE/CWE-730/ReDoS.ql
@@ -9,6 +9,7 @@
 * @precision high
 * @id java/redos
 * @tags security
+ *       external/cwe/cwe-1333
 *       external/cwe/cwe-730
 *       external/cwe/cwe-400
 */
--- a/java/ql/src/change-notes/2022-08-23-redos-cwe-1333.md
+++ b/java/ql/src/change-notes/2022-08-23-redos-cwe-1333.md
@@ -0,0 +1,4 @@
+---
+category: queryMetadata
+---
+* The queries `java/redos` and `java/polynomial-redos` now have a tag for CWE-1333.