Merge pull request #9132 from github/nickrolfe/misspelling

QL for QL: generalise non-US spelling query

java/ql/lib/semmle/code/java/dataflow/FlowSummary.qll

@@ -1,5 +1,5 @@
 /**
- * Provides classes and predicates for definining flow summaries.
+ * Provides classes and predicates for defining flow summaries.
  */
 
 import java

java/ql/lib/semmle/code/java/dataflow/internal/DataFlowImplCommon.qll

@@ -305,7 +305,7 @@ cached
 private module Cached {
   /**
    * If needed, call this predicate from `DataFlowImplSpecific.qll` in order to
-   * force a stage-dependency on the `DataFlowImplCommon.qll` stage and therby
+   * force a stage-dependency on the `DataFlowImplCommon.qll` stage and thereby
    * collapsing the two stages.
    */
   cached

java/ql/lib/semmle/code/java/dataflow/internal/FlowSummaryImplSpecific.qll

@@ -1,5 +1,5 @@
 /**
- * Provides Java specific classes and predicates for definining flow summaries.
+ * Provides Java specific classes and predicates for defining flow summaries.
  */
 
 private import java

java/ql/lib/semmle/code/java/security/JexlInjectionQuery.qll

@@ -1,4 +1,4 @@
-/** Provides classes to reason about Expression Langauge (JEXL) injection vulnerabilities. */
+/** Provides classes to reason about Expression Language (JEXL) injection vulnerabilities. */
 
 import java
 import semmle.code.java.dataflow.TaintTracking

java/ql/lib/semmle/code/java/security/JexlInjectionSinkModels.qll

@@ -1,4 +1,4 @@
-/** Provides sink models relating to Expression Langauge (JEXL) injection vulnerabilities. */
+/** Provides sink models relating to Expression Language (JEXL) injection vulnerabilities. */
 
 private import semmle.code.java.dataflow.ExternalFlow
 

java/ql/lib/semmle/code/java/security/XmlParsers.qll

@@ -1049,7 +1049,7 @@ class SafeTransformerFactory extends VarAccess {
   }
 }
 
-/** A `Transformer` created from a safely configured `TranformerFactory`. */
+/** A `Transformer` created from a safely configured `TransformerFactory`. */
 class SafeTransformer extends MethodAccess {
   SafeTransformer() {
     exists(SafeTransformerFactoryFlowConfig stf, Method m |

java/ql/lib/semmle/code/java/security/performance/ExponentialBackTracking.qll

@@ -51,7 +51,7 @@
  *     either a single character, a set of characters represented by a
  *     character class, or the set of all characters.
  *   * The product automaton is constructed lazily, starting with pair states
- *     `(q, q)` where `q` is a fork, and proceding along an over-approximate
+ *     `(q, q)` where `q` is a fork, and proceeding along an over-approximate
  *     step relation.
  *   * The over-approximate step relation allows transitions along pairs of
  *     abstract input symbols where the symbols have overlap in the characters they accept.

java/ql/src/experimental/Security/CWE/CWE-939/IncorrectURLVerification.ql

@@ -43,7 +43,7 @@ class UriGetHostMethod extends Method {
 }
 
 /**
- * The method access with incorrect string comparision
+ * The method access with incorrect string comparison
  */
 class HostVerificationMethodAccess extends MethodAccess {
   HostVerificationMethodAccess() {

java/ql/test/TestUtilities/InlineExpectationsTest.qll

@@ -181,7 +181,7 @@ private string expectationCommentPattern() { result = "\\s*\\$((?:[^/]|/[^/])*)(
 /**
  * The possible columns in an expectation comment. The `TDefaultColumn` branch represents the first
  * column in a comment. This column is not precedeeded by a name. `TNamedColumn(name)` represents a
- * column containing expected results preceeded by the string `name:`.
+ * column containing expected results preceded by the string `name:`.
  */
 private newtype TColumn =
   TDefaultColumn() or