Skip to content

Commit 26befeb

Browse files
committed
python: drop precision and add severity score
Given both the original FP score and our concerns regarding sanitizers, `@precision medium`, which is aligned with other languages, feels appropriate.
1 parent 7511b33 commit 26befeb

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

python/ql/src/Security/CWE-117/LogInjection.ql

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,8 @@
44
* insertion of forged log entries by a malicious user.
55
* @kind path-problem
66
* @problem.severity error
7-
* @precision high
7+
* @security-severity 7.8
8+
* @precision medium
89
* @id py/log-injection
910
* @tags security
1011
* external/cwe/cwe-117

0 commit comments

Comments
 (0)