Merge pull request #8459 from erik-krogh/addSeverities

JS: add missing @security-severity to JS queries
This commit is contained in:
Erik Krogh Kristensen
2022-03-16 12:03:19 +01:00
committed by GitHub
3 changed files with 6 additions and 1 deletions

View File

@@ -4,6 +4,7 @@
* user to execute arbitrary code.
* @kind path-problem
* @problem.severity warning
* @security-severity 6.1
* @precision medium
* @id js/unsafe-code-construction
* @tags security

View File

@@ -3,6 +3,7 @@
* @description The application does not verify the JWT payload with a cryptographic secret or public key.
* @kind problem
* @problem.severity warning
* @security-severity 7.0
* @precision high
* @id js/jwt-missing-verification
* @tags security