rename query to overly-large-range, and rewrite the @description

This commit is contained in:
Erik Krogh Kristensen
2022-07-12 15:06:23 +02:00
parent 9ecc3a2671
commit ff25451699
27 changed files with 57 additions and 53 deletions

View File

@@ -1,17 +1,18 @@
/**
* @name Suspicious regexp range
* @description Some ranges in regular expression might match more than intended.
* @name Overly large regular expression range
* @description Overly permissive regular expression ranges may cause regular expressions to match more than anticipated.
* This may allow an attacker to bypass a filter or sanitizer.
* @kind problem
* @problem.severity warning
* @security-severity 5.0
* @precision high
* @id java/suspicious-regexp-range
* @id java/overly-large-range
* @tags correctness
* security
* external/cwe/cwe-020
*/
import semmle.code.java.security.SuspiciousRegexpRangeQuery
import semmle.code.java.security.OverlyLargeRangeQuery
RegExpCharacterClass potentialMisparsedCharClass() {
// nested char classes are currently misparsed