From 60f3bade42cf65b497d52ecfd1fd353967018482 Mon Sep 17 00:00:00 2001 From: Geoffrey White <40627776+geoffw0@users.noreply.github.com> Date: Wed, 11 Nov 2026 13:48:11 +0000 Subject: [PATCH 1/7] Swift: refresh ReDoS query help references Use the canonical OWASP community URL and correct the referenced paper's title after checking all four external help links. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .../src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/swift/ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp b/swift/ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp index 641b1e56b7cc..90c3d34a36de 100644 --- a/swift/ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp +++ b/swift/ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp @@ -2,12 +2,12 @@
  • OWASP: - Regular expression Denial of Service - ReDoS. + Regular expression Denial of Service - ReDoS.
  • Wikipedia: ReDoS.
  • Wikipedia: Time complexity.
  • James Kirrage, Asiri Rathnayake, Hayo Thielecke: - Static Analysis for Regular Expression Denial-of-Service Attack. + Static Analysis for Regular Expression Denial-of-Service Attacks.
    • From 5dcc1b0472468902683ff93f3efacab29e2bbb4f Mon Sep 17 00:00:00 2001 From: Geoffrey White <40627776+geoffw0@users.noreply.github.com> Date: Wed, 11 Nov 2026 14:25:04 +0000 Subject: [PATCH 2/7] Swift: refresh cleartext database help reference Use the canonical OWASP Top 10:2021 cryptographic failures URL and repair the garbled separator in its link label after checking both external references. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- .../src/queries/Security/CWE-311/CleartextStorageDatabase.qhelp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.qhelp b/swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.qhelp index e4ae8c9cfa83..b6c57ce99b13 100644 --- a/swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.qhelp +++ b/swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.qhelp @@ -21,7 +21,7 @@
  • OWASP Top 10:2021: - A02:2021 � Cryptographic Failures. + A02:2021 – Cryptographic Failures.
  • OWASP: From 2b1d163ed59d9969a0bb2ca51d892d766bde423e Mon Sep 17 00:00:00 2001 From: Geoffrey White <40627776+geoffw0@users.noreply.github.com> Date: Wed, 11 Nov 2026 14:43:10 +0000 Subject: [PATCH 3/7] Swift: Update cleartext transmission help reference. --- .../ql/src/queries/Security/CWE-311/CleartextTransmission.qhelp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.qhelp b/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.qhelp index 653ba33aba4c..90aa584b8863 100644 --- a/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.qhelp +++ b/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.qhelp @@ -21,7 +21,7 @@
  • OWASP Top 10:2021: - A02:2021 � Cryptographic Failures. + A02:2021 � Cryptographic Failures.
  • OWASP: From 183acd4c070c10d5ec20d5b4c85804ebd27e03e0 Mon Sep 17 00:00:00 2001 From: Geoffrey White <40627776+geoffw0@users.noreply.github.com> Date: Wed, 11 Nov 2026 14:58:07 +0000 Subject: [PATCH 4/7] Fix reference title for ReDoS attack Corrected the title of a reference to match the singular form. Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- .../ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/swift/ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp b/swift/ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp index 90c3d34a36de..c7524dadf4ae 100644 --- a/swift/ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp +++ b/swift/ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp @@ -7,7 +7,7 @@
  • Wikipedia: ReDoS.
  • Wikipedia: Time complexity.
  • James Kirrage, Asiri Rathnayake, Hayo Thielecke: - Static Analysis for Regular Expression Denial-of-Service Attacks. + Static Analysis for Regular Expression Denial-of-Service Attack.
    • From f666675bd16e04f862af17d808642698a28adc87 Mon Sep 17 00:00:00 2001 From: Geoffrey White <40627776+geoffw0@users.noreply.github.com> Date: Wed, 11 Nov 2026 15:07:57 +0000 Subject: [PATCH 5/7] Swift: Qhelp consistency - dashes. --- .../src/queries/Security/CWE-311/CleartextStorageDatabase.qhelp | 2 +- .../ql/src/queries/Security/CWE-311/CleartextTransmission.qhelp | 2 +- .../queries/Security/CWE-312/CleartextStoragePreferences.qhelp | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.qhelp b/swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.qhelp index b6c57ce99b13..99a65060a507 100644 --- a/swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.qhelp +++ b/swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.qhelp @@ -21,7 +21,7 @@
  • OWASP Top 10:2021: - A02:2021 – Cryptographic Failures. + A02:2021 - Cryptographic Failures.
  • OWASP: diff --git a/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.qhelp b/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.qhelp index 90aa584b8863..d85df91fda10 100644 --- a/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.qhelp +++ b/swift/ql/src/queries/Security/CWE-311/CleartextTransmission.qhelp @@ -21,7 +21,7 @@
  • OWASP Top 10:2021: - A02:2021 � Cryptographic Failures. + A02:2021 - Cryptographic Failures.
  • OWASP: diff --git a/swift/ql/src/queries/Security/CWE-312/CleartextStoragePreferences.qhelp b/swift/ql/src/queries/Security/CWE-312/CleartextStoragePreferences.qhelp index 4ad73ed4872b..fb4578e70d1f 100644 --- a/swift/ql/src/queries/Security/CWE-312/CleartextStoragePreferences.qhelp +++ b/swift/ql/src/queries/Security/CWE-312/CleartextStoragePreferences.qhelp @@ -21,7 +21,7 @@
  • OWASP Top 10:2021: - A02:2021 — Cryptographic Failures. + A02:2021 - Cryptographic Failures.
  • Apple Developer Documentation: UserDefaults, NSUbiquitousKeyValueStore From eaaf828ba3709feb986b71eb1e91d335e45c0b14 Mon Sep 17 00:00:00 2001 From: Geoffrey White <40627776+geoffw0@users.noreply.github.com> Date: Wed, 11 Nov 2026 15:31:43 +0000 Subject: [PATCH 6/7] Various: Qhelp consistency - paper title. --- java/ql/src/Security/CWE/CWE-730/ReDoSReferences.inc.qhelp | 2 +- javascript/ql/src/Performance/ReDoSReferences.inc.qhelp | 2 +- python/ql/src/Security/CWE-730/ReDoSReferences.inc.qhelp | 2 +- ruby/ql/src/queries/security/cwe-1333/ReDoSReferences.inc.qhelp | 2 +- .../ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/java/ql/src/Security/CWE/CWE-730/ReDoSReferences.inc.qhelp b/java/ql/src/Security/CWE/CWE-730/ReDoSReferences.inc.qhelp index 7aec3aa0bf08..b3f8a8070d5e 100644 --- a/java/ql/src/Security/CWE/CWE-730/ReDoSReferences.inc.qhelp +++ b/java/ql/src/Security/CWE/CWE-730/ReDoSReferences.inc.qhelp @@ -10,7 +10,7 @@
  • Wikipedia: ReDoS.
  • Wikipedia: Time complexity.
  • James Kirrage, Asiri Rathnayake, Hayo Thielecke: - Static Analysis for Regular Expression Denial-of-Service Attack. + Static Analysis for Regular Expression Denial-of-Service Attacks.
    • diff --git a/javascript/ql/src/Performance/ReDoSReferences.inc.qhelp b/javascript/ql/src/Performance/ReDoSReferences.inc.qhelp index 7aec3aa0bf08..b3f8a8070d5e 100644 --- a/javascript/ql/src/Performance/ReDoSReferences.inc.qhelp +++ b/javascript/ql/src/Performance/ReDoSReferences.inc.qhelp @@ -10,7 +10,7 @@
  • Wikipedia: ReDoS.
  • Wikipedia: Time complexity.
  • James Kirrage, Asiri Rathnayake, Hayo Thielecke: - Static Analysis for Regular Expression Denial-of-Service Attack. + Static Analysis for Regular Expression Denial-of-Service Attacks.
    • diff --git a/python/ql/src/Security/CWE-730/ReDoSReferences.inc.qhelp b/python/ql/src/Security/CWE-730/ReDoSReferences.inc.qhelp index 7aec3aa0bf08..b3f8a8070d5e 100644 --- a/python/ql/src/Security/CWE-730/ReDoSReferences.inc.qhelp +++ b/python/ql/src/Security/CWE-730/ReDoSReferences.inc.qhelp @@ -10,7 +10,7 @@
  • Wikipedia: ReDoS.
  • Wikipedia: Time complexity.
  • James Kirrage, Asiri Rathnayake, Hayo Thielecke: - Static Analysis for Regular Expression Denial-of-Service Attack. + Static Analysis for Regular Expression Denial-of-Service Attacks.
    • diff --git a/ruby/ql/src/queries/security/cwe-1333/ReDoSReferences.inc.qhelp b/ruby/ql/src/queries/security/cwe-1333/ReDoSReferences.inc.qhelp index 641b1e56b7cc..fa0b7536895c 100644 --- a/ruby/ql/src/queries/security/cwe-1333/ReDoSReferences.inc.qhelp +++ b/ruby/ql/src/queries/security/cwe-1333/ReDoSReferences.inc.qhelp @@ -7,7 +7,7 @@
  • Wikipedia: ReDoS.
  • Wikipedia: Time complexity.
  • James Kirrage, Asiri Rathnayake, Hayo Thielecke: - Static Analysis for Regular Expression Denial-of-Service Attack. + Static Analysis for Regular Expression Denial-of-Service Attacks.
    • diff --git a/swift/ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp b/swift/ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp index c7524dadf4ae..90c3d34a36de 100644 --- a/swift/ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp +++ b/swift/ql/src/queries/Security/CWE-1333/ReDoSReferences.inc.qhelp @@ -7,7 +7,7 @@
  • Wikipedia: ReDoS.
  • Wikipedia: Time complexity.
  • James Kirrage, Asiri Rathnayake, Hayo Thielecke: - Static Analysis for Regular Expression Denial-of-Service Attack. + Static Analysis for Regular Expression Denial-of-Service Attacks.
    • From 99c418b701716ac84d153d930949704c0940cd19 Mon Sep 17 00:00:00 2001 From: Geoffrey White <40627776+geoffw0@users.noreply.github.com> Date: Wed, 11 Nov 2026 15:43:33 +0000 Subject: [PATCH 7/7] Various: Fix other copies of the same links. --- csharp/ql/src/Security Features/CWE-730/ReDoS.qhelp | 2 +- csharp/ql/src/Security Features/CWE-730/RegexInjection.qhelp | 2 +- java/ql/src/Security/CWE/CWE-730/ReDoSReferences.inc.qhelp | 2 +- java/ql/src/Security/CWE/CWE-730/RegexInjection.qhelp | 2 +- javascript/ql/src/Performance/ReDoSReferences.inc.qhelp | 2 +- javascript/ql/src/Security/CWE-730/RegExpInjection.inc.qhelp | 2 +- python/ql/src/Security/CWE-730/ReDoSReferences.inc.qhelp | 2 +- python/ql/src/Security/CWE-730/RegexInjection.qhelp | 2 +- ruby/ql/src/queries/security/cwe-1333/ReDoSReferences.inc.qhelp | 2 +- ruby/ql/src/queries/security/cwe-1333/RegExpInjection.qhelp | 2 +- .../ql/src/queries/security/CWE-311/CleartextTransmission.qhelp | 2 +- .../src/queries/security/CWE-312/CleartextStorageDatabase.qhelp | 2 +- .../queries/Security/CWE-312/CleartextStoragePreferences.qhelp | 2 +- swift/ql/src/queries/Security/CWE-730/RegexInjection.qhelp | 2 +- 14 files changed, 14 insertions(+), 14 deletions(-) diff --git a/csharp/ql/src/Security Features/CWE-730/ReDoS.qhelp b/csharp/ql/src/Security Features/CWE-730/ReDoS.qhelp index 114aebf146e1..fed71cf32b77 100644 --- a/csharp/ql/src/Security Features/CWE-730/ReDoS.qhelp +++ b/csharp/ql/src/Security Features/CWE-730/ReDoS.qhelp @@ -51,7 +51,7 @@ evaluation of the regular expression after 1 second.

  • OWASP: -Regular expression Denial of Service - ReDoS. +Regular expression Denial of Service - ReDoS.
  • Wikipedia: ReDoS. diff --git a/csharp/ql/src/Security Features/CWE-730/RegexInjection.qhelp b/csharp/ql/src/Security Features/CWE-730/RegexInjection.qhelp index 195a1cdfdd95..0e39cadfc6fd 100644 --- a/csharp/ql/src/Security Features/CWE-730/RegexInjection.qhelp +++ b/csharp/ql/src/Security Features/CWE-730/RegexInjection.qhelp @@ -46,7 +46,7 @@ meaning in regular expressions.
  • OWASP: -Regular expression Denial of Service - ReDoS. +Regular expression Denial of Service - ReDoS.
  • Wikipedia: ReDoS. diff --git a/java/ql/src/Security/CWE/CWE-730/ReDoSReferences.inc.qhelp b/java/ql/src/Security/CWE/CWE-730/ReDoSReferences.inc.qhelp index b3f8a8070d5e..3c0c91307cee 100644 --- a/java/ql/src/Security/CWE/CWE-730/ReDoSReferences.inc.qhelp +++ b/java/ql/src/Security/CWE/CWE-730/ReDoSReferences.inc.qhelp @@ -5,7 +5,7 @@
  • OWASP: - Regular expression Denial of Service - ReDoS. + Regular expression Denial of Service - ReDoS.
  • Wikipedia: ReDoS.
  • Wikipedia: Time complexity.
    • diff --git a/java/ql/src/Security/CWE/CWE-730/RegexInjection.qhelp b/java/ql/src/Security/CWE/CWE-730/RegexInjection.qhelp index 3e239d07107b..437224257552 100644 --- a/java/ql/src/Security/CWE/CWE-730/RegexInjection.qhelp +++ b/java/ql/src/Security/CWE/CWE-730/RegexInjection.qhelp @@ -39,7 +39,7 @@ meaning in regular expressions.
  • OWASP: -Regular expression Denial of Service - ReDoS. +Regular expression Denial of Service - ReDoS.
  • Wikipedia: ReDoS. diff --git a/javascript/ql/src/Performance/ReDoSReferences.inc.qhelp b/javascript/ql/src/Performance/ReDoSReferences.inc.qhelp index b3f8a8070d5e..3c0c91307cee 100644 --- a/javascript/ql/src/Performance/ReDoSReferences.inc.qhelp +++ b/javascript/ql/src/Performance/ReDoSReferences.inc.qhelp @@ -5,7 +5,7 @@
  • OWASP: - Regular expression Denial of Service - ReDoS. + Regular expression Denial of Service - ReDoS.
  • Wikipedia: ReDoS.
  • Wikipedia: Time complexity.
    • diff --git a/javascript/ql/src/Security/CWE-730/RegExpInjection.inc.qhelp b/javascript/ql/src/Security/CWE-730/RegExpInjection.inc.qhelp index 6cd1120d07bb..308fe3199dfc 100644 --- a/javascript/ql/src/Security/CWE-730/RegExpInjection.inc.qhelp +++ b/javascript/ql/src/Security/CWE-730/RegExpInjection.inc.qhelp @@ -36,7 +36,7 @@ characters which have a special meaning in regular expressions.
  • OWASP: -Regular expression Denial of Service - ReDoS. +Regular expression Denial of Service - ReDoS.
  • Wikipedia: ReDoS. diff --git a/python/ql/src/Security/CWE-730/ReDoSReferences.inc.qhelp b/python/ql/src/Security/CWE-730/ReDoSReferences.inc.qhelp index b3f8a8070d5e..3c0c91307cee 100644 --- a/python/ql/src/Security/CWE-730/ReDoSReferences.inc.qhelp +++ b/python/ql/src/Security/CWE-730/ReDoSReferences.inc.qhelp @@ -5,7 +5,7 @@
  • OWASP: - Regular expression Denial of Service - ReDoS. + Regular expression Denial of Service - ReDoS.
  • Wikipedia: ReDoS.
  • Wikipedia: Time complexity.
    • diff --git a/python/ql/src/Security/CWE-730/RegexInjection.qhelp b/python/ql/src/Security/CWE-730/RegexInjection.qhelp index f19f07444691..eb295a75efe8 100644 --- a/python/ql/src/Security/CWE-730/RegexInjection.qhelp +++ b/python/ql/src/Security/CWE-730/RegexInjection.qhelp @@ -37,7 +37,7 @@ special meaning in regular expressions. -
  • OWASP: Regular expression Denial of Service - ReDoS.
    • +
  • OWASP: Regular expression Denial of Service - ReDoS.
  • Wikipedia: ReDoS.
  • Python docs: re.
  • SonarSource: RSPEC-2631.
    • diff --git a/ruby/ql/src/queries/security/cwe-1333/ReDoSReferences.inc.qhelp b/ruby/ql/src/queries/security/cwe-1333/ReDoSReferences.inc.qhelp index fa0b7536895c..90c3d34a36de 100644 --- a/ruby/ql/src/queries/security/cwe-1333/ReDoSReferences.inc.qhelp +++ b/ruby/ql/src/queries/security/cwe-1333/ReDoSReferences.inc.qhelp @@ -2,7 +2,7 @@
  • OWASP: - Regular expression Denial of Service - ReDoS. + Regular expression Denial of Service - ReDoS.
  • Wikipedia: ReDoS.
  • Wikipedia: Time complexity.
    • diff --git a/ruby/ql/src/queries/security/cwe-1333/RegExpInjection.qhelp b/ruby/ql/src/queries/security/cwe-1333/RegExpInjection.qhelp index 014822f35fab..aa1f0022a8a3 100644 --- a/ruby/ql/src/queries/security/cwe-1333/RegExpInjection.qhelp +++ b/ruby/ql/src/queries/security/cwe-1333/RegExpInjection.qhelp @@ -37,7 +37,7 @@ user cannot insert characters that have special meanings in regular expressions.
  • OWASP: -Regular expression Denial of Service - ReDoS. +Regular expression Denial of Service - ReDoS.
  • Wikipedia: ReDoS. diff --git a/rust/ql/src/queries/security/CWE-311/CleartextTransmission.qhelp b/rust/ql/src/queries/security/CWE-311/CleartextTransmission.qhelp index 1fb29c55ca00..00f4d9ec88ed 100644 --- a/rust/ql/src/queries/security/CWE-311/CleartextTransmission.qhelp +++ b/rust/ql/src/queries/security/CWE-311/CleartextTransmission.qhelp @@ -40,7 +40,7 @@ encryption algorithm, and put suitable key management practices into place.
  • OWASP Top 10:2021: - A02:2021 - Cryptographic Failures. + A02:2021 - Cryptographic Failures.
  • OWASP: diff --git a/rust/ql/src/queries/security/CWE-312/CleartextStorageDatabase.qhelp b/rust/ql/src/queries/security/CWE-312/CleartextStorageDatabase.qhelp index 595de607c3e5..f5ee2bc11b1e 100644 --- a/rust/ql/src/queries/security/CWE-312/CleartextStorageDatabase.qhelp +++ b/rust/ql/src/queries/security/CWE-312/CleartextStorageDatabase.qhelp @@ -42,7 +42,7 @@ AES before storing it in the database:
  • OWASP Top 10:2021: - A02:2021 - Cryptographic Failures. + A02:2021 - Cryptographic Failures.
  • OWASP: diff --git a/swift/ql/src/queries/Security/CWE-312/CleartextStoragePreferences.qhelp b/swift/ql/src/queries/Security/CWE-312/CleartextStoragePreferences.qhelp index fb4578e70d1f..524c744c1d7b 100644 --- a/swift/ql/src/queries/Security/CWE-312/CleartextStoragePreferences.qhelp +++ b/swift/ql/src/queries/Security/CWE-312/CleartextStoragePreferences.qhelp @@ -21,7 +21,7 @@
  • OWASP Top 10:2021: - A02:2021 - Cryptographic Failures. + A02:2021 - Cryptographic Failures.
  • Apple Developer Documentation: UserDefaults, NSUbiquitousKeyValueStore diff --git a/swift/ql/src/queries/Security/CWE-730/RegexInjection.qhelp b/swift/ql/src/queries/Security/CWE-730/RegexInjection.qhelp index 9b25131d65f5..0301cfb5e5ab 100644 --- a/swift/ql/src/queries/Security/CWE-730/RegexInjection.qhelp +++ b/swift/ql/src/queries/Security/CWE-730/RegexInjection.qhelp @@ -38,7 +38,7 @@ meanings in regular expressions.
  • OWASP: -Regular expression Denial of Service - ReDoS. +Regular expression Denial of Service - ReDoS.
  • Wikipedia: ReDoS.