add CWE-400, and add a reference to DoS attacks

erik-krogh · erik-krogh · commit 2e5d435bead1 · 2022-04-14T18:37:50.000+02:00
diff --git a/javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp b/javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp
@@ -109,7 +109,9 @@
 	</example>
 
 	<references>
-
+        <li>
+            Wikipedia: <a href="https://en.wikipedia.org/wiki/Denial-of-service_attack">Denial-of-service attack</a>.
+        </li>
 	</references>
 
 </qhelp>
diff --git a/javascript/ql/src/Security/CWE-770/ResourceExhaustion.ql b/javascript/ql/src/Security/CWE-770/ResourceExhaustion.ql
@@ -8,6 +8,7 @@
  * @id js/resource-exhaustion
  * @precision high
  * @tags security
+ *       external/cwe/cwe-400
  *       external/cwe/cwe-770
  */
 
