filter out potential misparses from java/suspicious-regexp-range

java/ql/src/Security/CWE/CWE-020/SuspiciousRegexpRange.ql

@@ -13,6 +13,13 @@
 
 import semmle.code.java.security.SuspiciousRegexpRangeQuery
 
+RegExpCharacterClass potentialMisparsedCharClass() {
+  // nested char classes are currently misparsed
+  result.getAChild().(RegExpNormalChar).getValue() = "["
+}
+
 from RegExpCharacterRange range, string reason
-where problem(range, reason)
+where
+  problem(range, reason) and
+  not range.getParent() = potentialMisparsedCharClass()
 select range, "Suspicious character range that " + reason + "."