Merge pull request #732 from aschackmull/java/conditional-bypass-precision

yh-semmle · web-flow · commit d4f2a07a77ec · 2019-01-08T14:58:58.000-05:00
Java: Reduce precision of java/user-controlled-bypass.
diff --git a/java/ql/src/Security/CWE/CWE-807/ConditionalBypass.ql b/java/ql/src/Security/CWE/CWE-807/ConditionalBypass.ql
@@ -4,7 +4,7 @@
  *              passing through authentication systems.
  * @kind path-problem
  * @problem.severity error
- * @precision high
+ * @precision medium
  * @id java/user-controlled-bypass
  * @tags security
  *       external/cwe/cwe-807
