Remove prohibited CWE-730 tag from queries · github/codeql@bd80295 · GitHub
Skip to content

Commit bd80295

Browse files
jketemaCopilot
jketema
and
Copilot
committed
Remove prohibited CWE-730 tag from queries
MITRE marks CWE-730 as PROHIBITED for mapping real-world vulnerabilities. Remove the external/cwe/cwe-730 tag from all queries and add change notes. Query paths and suite expectations are unchanged. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent 6dc5ec9 commit bd80295

25 files changed

Lines changed: 24 additions & 19 deletions

File tree

‎csharp/ql/src/Security Features/CWE-730/ReDoS.ql‎

Lines changed: 0 additions & 1 deletion

‎csharp/ql/src/Security Features/CWE-730/RegexInjection.ql‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,6 @@
99
* @precision high
1010
* @id cs/regex-injection
1111
* @tags security
12-
* external/cwe/cwe-730
1312
* external/cwe/cwe-400
1413
*/
1514

‎csharp/ql/src/change-notes/2026-10-21-remove-cwe-730.md‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: minorAnalysis
3+
---
4+
* The `external/cwe/cwe-730` tag has been removed from `cs/redos` and `cs/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags.

‎java/ql/src/Security/CWE/CWE-730/PolynomialReDoS.ql‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,6 @@
99
* @id java/polynomial-redos
1010
* @tags security
1111
* external/cwe/cwe-1333
12-
* external/cwe/cwe-730
1312
* external/cwe/cwe-400
1413
*/
1514

‎java/ql/src/Security/CWE/CWE-730/ReDoS.ql‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,6 @@
1010
* @id java/redos
1111
* @tags security
1212
* external/cwe/cwe-1333
13-
* external/cwe/cwe-730
1413
* external/cwe/cwe-400
1514
*/
1615

‎java/ql/src/Security/CWE/CWE-730/RegexInjection.ql‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,6 @@
99
* @precision high
1010
* @id java/regex-injection
1111
* @tags security
12-
* external/cwe/cwe-730
1312
* external/cwe/cwe-400
1413
*/
1514

‎java/ql/src/change-notes/2026-10-21-remove-cwe-730.md‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
category: minorAnalysis
3+
---
4+
* The `external/cwe/cwe-730` tag has been removed from `java/redos`, `java/polynomial-redos` and `java/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags.

‎javascript/ql/src/Performance/PolynomialReDoS.ql‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,6 @@
99
* @id js/polynomial-redos
1010
* @tags security
1111
* external/cwe/cwe-1333
12-
* external/cwe/cwe-730
1312
* external/cwe/cwe-400
1413
*/
1514

‎javascript/ql/src/Performance/ReDoS.ql‎

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,6 @@
1010
* @id js/redos
1111
* @tags security
1212
* external/cwe/cwe-1333
13-
* external/cwe/cwe-730
1413
* external/cwe/cwe-400
1514
*/
1615

‎javascript/ql/src/Security/CWE-730/RegExpInjection.ql‎

Lines changed: 0 additions & 1 deletion

0 commit comments

Comments
 (0)