Merge pull request #15351 from erik-krogh/zero-to-question

JS/PY/JAVA/RB: mark the range [0-?] as good in the overly-large-range query

Author: erik-krogh

javascript/ql/test/query-tests/Security/CWE-020/SuspiciousRegexpRange/tst.js

@@ -27,4 +27,6 @@ var overlapsWithClass1 = /[0-9\d]/; // NOT OK
 var overlapsWithClass2 = /[\w,.-?:*+]/; // NOT OK
 
 var tst2 = /^([ァ-ヾ]|[ｧ-ﾝﾞﾟ])+$/; // OK
-var tst3 = /[0-9０-９]/; // OK
+var tst3 = /[0-9０-９]/; // OK
+
+var question = /[0-?]/; // OK. matches one of: 0123456789:;<=>?

shared/regex/codeql/regex/OverlyLargeRangeQuery.qll

@@ -129,6 +129,9 @@ module Make<RegexTreeViewSig TreeImpl> {
     or
     // starting from the zero byte is a good indication that it's purposely matching a large range.
     result.isRange(0.toUnicode(), _)
+    or
+    // the range 0123456789:;<=>? is intentional
+    result.isRange("0", "?")
   }
 
   /** Gets a char between (and including) `low` and `high`. */