Skip to content

Python: Set precision of security queries to 'high' #500

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
pavgust merged 1 commit into from
Nov 21, 2018
Merged

Python: Set precision of security queries to 'high' #500

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion python/ql/src/Security/CWE-022/PathInjection.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
* @kind problem
* @problem.severity error
* @sub-severity high
* @precision medium
* @precision high

@felicitymay felicitymay Nov 21, 2018

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should have a change note since it changes the behaviour of alerts from these queries.

* @id py/path-injection
* @tags correctness
* security
Expand Down
2 changes: 1 addition & 1 deletion python/ql/src/Security/CWE-078/CommandInjection.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
* @kind problem
* @problem.severity error
* @sub-severity high
* @precision medium
* @precision high
* @id py/command-line-injection
* @tags correctness
* security
Expand Down
2 changes: 1 addition & 1 deletion python/ql/src/Security/CWE-079/ReflectedXss.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
* @kind problem
* @problem.severity error
* @sub-severity high
* @precision medium
* @precision high
* @id py/reflective-xss
* @tags security
* external/cwe/cwe-079
Expand Down
2 changes: 1 addition & 1 deletion python/ql/src/Security/CWE-089/SqlInjection.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@
* malicious SQL code by the user.
* @kind problem
* @problem.severity error
* @precision medium
* @precision high
* @id py/sql-injection
* @tags security
* external/cwe/cwe-089
Expand Down
2 changes: 1 addition & 1 deletion python/ql/src/Security/CWE-094/CodeInjection.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
* @kind problem
* @problem.severity error
* @sub-severity high
* @precision medium
* @precision high
* @id py/code-injection
* @tags security
* external/owasp/owasp-a1
Expand Down
2 changes: 1 addition & 1 deletion python/ql/src/Security/CWE-327/BrokenCryptoAlgorithm.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
* @description Using broken or weak cryptographic algorithms can compromise security.
* @kind problem
* @problem.severity warning
* @precision medium
* @precision high
* @id py/weak-cryptographic-algorithm
* @tags security
* external/cwe/cwe-327
Expand Down
2 changes: 1 addition & 1 deletion python/ql/src/Security/CWE-502/UnsafeDeserialization.ql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
* @id py/unsafe-deserialization
* @problem.severity error
* @sub-severity high
* @precision medium
* @precision high
* @tags external/cwe/cwe-502
* security
* serialization
Expand Down