Skip to content

Commit 6e2fb6f

Browse files
committed
Shared: Fix for 'coauthor'.
1 parent 213ab90 commit 6e2fb6f

2 files changed

Lines changed: 3 additions & 3 deletions

File tree

rust/ql/test/library-tests/sensitivedata/test.rs

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -78,7 +78,7 @@ fn test_passwords(
7878
sink(encoded_password);
7979
sink(password_hash);
8080
sink(passwordFile);
81-
sink(coauthor); // $ SPURIOUS: sensitive=password
81+
sink(coauthor);
8282

8383
sink(ms.harmless.as_str());
8484
sink(ms.password_file_path.as_str());

shared/concepts/codeql/concepts/internal/SensitiveDataHeuristics.qll

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -146,12 +146,12 @@ module HeuristicNames {
146146
*
147147
* We also filter out common words like `certain` and `concert`, since otherwise these could
148148
* be matched by the certificate regular expressions. Same for `accountable` (account),
149-
* `secretarial` (secret), `wildcard` (card).
149+
* `secretarial` (secret), `wildcard` (card), `coauthor` (oauth).
150150
*/
151151
string notSensitiveRegexp() {
152152
result =
153153
"(?is).*([^\\w$.-]|redact|censor|obfuscate|hash|md5|sha|random|((?<!un)(en))?(crypt|(?<!pass)code)|"
154-
+ "certain|concert|secretar|wildcard|account(ant|ab|ing|ed)|(?<!pro)file|path|([_-]|\\b)url).*"
154+
+ "certain|concert|secretar|wildcard|coauthor|account(ant|ab|ing|ed)|(?<!pro)file|path|([_-]|\\b)url).*"
155155
}
156156

157157
/**

0 commit comments

Comments
 (0)