rename query to overly-large-range, and rewrite the @description

Author: erik-krogh

config/identical-files.json

@@ -506,11 +506,11 @@
     "python/ql/lib/semmle/python/security/BadTagFilterQuery.qll",
     "ruby/ql/lib/codeql/ruby/security/BadTagFilterQuery.qll"
   ],
-  "SuspiciousRegexRange Python/JS/Ruby/Java": [
-    "javascript/ql/lib/semmle/javascript/security/SuspiciousRegexpRangeQuery.qll",
-    "python/ql/lib/semmle/python/security/SuspiciousRegexpRangeQuery.qll",
-    "ruby/ql/lib/codeql/ruby/security/SuspiciousRegexpRangeQuery.qll",
-    "java/ql/lib/semmle/code/java/security/SuspiciousRegexpRangeQuery.qll"
+  "OverlyLargeRange Python/JS/Ruby/Java": [
+    "javascript/ql/lib/semmle/javascript/security/OverlyLargeRangeQuery.qll",
+    "python/ql/lib/semmle/python/security/OverlyLargeRangeQuery.qll",
+    "ruby/ql/lib/codeql/ruby/security/OverlyLargeRangeQuery.qll",
+    "java/ql/lib/semmle/code/java/security/OverlyLargeRangeQuery.qll"
   ],
   "CFG": [
     "csharp/ql/lib/semmle/code/csharp/controlflow/internal/ControlFlowGraphImplShared.qll",

…/security/SuspiciousRegexpRangeQuery.qll …/java/security/OverlyLargeRangeQuery.qlljava/ql/lib/semmle/code/java/security/SuspiciousRegexpRangeQuery.qll renamed to java/ql/lib/semmle/code/java/security/OverlyLargeRangeQuery.qll java/ql/lib/semmle/code/java/security/SuspiciousRegexpRangeQuery.qll renamed to java/ql/lib/semmle/code/java/security/OverlyLargeRangeQuery.qll

@@ -1,17 +1,18 @@
 /**
- * @name Suspicious regexp range
- * @description Some ranges in regular expression might match more than intended.
+ * @name Overly large regular expression range
+ * @description Overly permissive regular expression ranges may cause regular expressions to match more than anticipated.
+ *              This may allow an attacker to bypass a filter or sanitizer.
  * @kind problem
  * @problem.severity warning
  * @security-severity 5.0
  * @precision high
- * @id java/suspicious-regexp-range
+ * @id java/overly-large-range
  * @tags correctness
  *       security
  *       external/cwe/cwe-020
  */
 
-import semmle.code.java.security.SuspiciousRegexpRangeQuery
+import semmle.code.java.security.OverlyLargeRangeQuery
 
 RegExpCharacterClass potentialMisparsedCharClass() {
   // nested char classes are currently misparsed

…/CWE/CWE-020/SuspiciousRegexpRange.qhelp …urity/CWE/CWE-020/OverlyLargeRange.qhelpjava/ql/src/Security/CWE/CWE-020/SuspiciousRegexpRange.qhelp renamed to java/ql/src/Security/CWE/CWE-020/OverlyLargeRange.qhelp java/ql/src/Security/CWE/CWE-020/SuspiciousRegexpRange.qhelp renamed to java/ql/src/Security/CWE/CWE-020/OverlyLargeRange.qhelp

@@ -0,0 +1 @@
+Security/CWE/CWE-020/OverlyLargeRange.ql

…ity/CWE/CWE-020/SuspiciousRegexpRange.ql …Security/CWE/CWE-020/OverlyLargeRange.qljava/ql/src/Security/CWE/CWE-020/SuspiciousRegexpRange.ql renamed to java/ql/src/Security/CWE/CWE-020/OverlyLargeRange.ql java/ql/src/Security/CWE/CWE-020/SuspiciousRegexpRange.ql renamed to java/ql/src/Security/CWE/CWE-020/OverlyLargeRange.ql

@@ -0,0 +1,19 @@
+/**
+ * @name Overly large regular expression range
+ * @description Overly permissive regular expression ranges may cause regular expressions to match more than anticipated.
+ *              This may allow an attacker to bypass a filter or sanitizer.
+ * @kind problem
+ * @problem.severity warning
+ * @security-severity 5.0
+ * @precision high
+ * @id js/overly-large-range
+ * @tags correctness
+ *       security
+ *       external/cwe/cwe-020
+ */
+
+import semmle.javascript.security.OverlyLargeRangeQuery
+
+from RegExpCharacterRange range, string reason
+where problem(range, reason)
+select range, "Suspicious character range that " + reason + "."