Merge pull request #462 from Privado-Inc/dev

Release PR
Privado-Inc · May 24, 2024 · 7edb59a · 7edb59a
2 parents 4c5958b + be9d556
commit 7edb59a
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 5 deletions.
diff --git a/config/systemConfig/default.yaml b/config/systemConfig/default.yaml
@@ -13,3 +13,9 @@ systemConfig:
 
   - key: maxCharLimit
     value: "1000"
+
+  - key: dataflowElementInPathLimit
+    value: "-1"
+
+  - key: dataflowSourceSinkPairPathLimit
+    value: "-1"
diff --git a/rules/sinks/leakages/logs/java.yaml b/rules/sinks/leakages/logs/java.yaml
@@ -3,25 +3,25 @@ sinks:
   - id: Leakages.Log.Error
     name: Log Error
     patterns:
-      - "(?i)(?:org.slf4j.Logger|org.apache.logging.log4j|org.tinylog.Logger|ch.qos.logback|java.util.logging|timber.log.Timber|android.util.Log).*(?:wtf|error|severe|fatal|[.]e[:]).*"
+      - "(?i)(?:org.slf4j.Logger|org.apache.(logging.log4j|commons.logging.Log)|org.tinylog.Logger|ch.qos.logback|java.util.logging|timber.log.Timber|android.util.Log).*(?:wtf|error|severe|fatal|[.]e[:]).*"
     tags:
 
   - id: Leakages.Log.Warn
     name: Log Warn
     patterns:
-      - "(?i)(?:org.slf4j.Logger|org.apache.logging.log4j|org.tinylog.Logger|ch.qos.logback|java.util.logging|timber.log.Timber|android.util.Log).*(warn|warning|[.]w[:]).*"
+      - "(?i)(?:org.slf4j.Logger|org.apache.(logging.log4j|commons.logging.Log)|org.tinylog.Logger|ch.qos.logback|java.util.logging|timber.log.Timber|android.util.Log).*(warn|warning|[.]w[:]).*"
     tags:
 
   - id: Leakages.Log.Debug
     name: Log Debug
     patterns:
-      - "(?i)(?:org.slf4j.Logger|org.apache.logging.log4j|org.tinylog.Logger|ch.qos.logback|java.util.logging|timber.log.Timber|android.util.Log).*(debug|trace|[.](log|d|v|t)[:]).*"
+      - "(?i)(?:org.slf4j.Logger|org.apache.(logging.log4j|commons.logging.Log)|org.tinylog.Logger|ch.qos.logback|java.util.logging|timber.log.Timber|android.util.Log).*(debug|trace|[.](log|d|v|t)[:]).*"
     tags:
 
   - id: Leakages.Log.Info
     name: Log Info
     patterns:
-      - "(?i)(?:org.slf4j.Logger|org.apache.logging.log4j|org.tinylog.Logger|java.util.logging|ch.qos.logback|timber.log.Timber|android.util.Log).*(info|[.]i[:]).*"
+      - "(?i)(?:org.slf4j.Logger|org.apache.(logging.log4j|commons.logging.Log)|org.tinylog.Logger|java.util.logging|ch.qos.logback|timber.log.Timber|android.util.Log).*(info|[.]i[:]).*"
     tags:
 
   - id: Leakages.Log.Console

diff --git a/rules/sources/purchase_data.yaml b/rules/sources/purchase_data.yaml
@@ -25,7 +25,7 @@ sources:
     isSensitive: False
     sensitivity: medium
     patterns:
-      - "(?i).*((order|shipping|billing|invoice|total)(subscription|charge|charged)?[^\\s/(;)#|,=!>]{0,5}(number|code|num|no|id|amount))"
+      - "(?i).*((order|shipping|billing|invoice|total[-_]?(subscription|charge|charged))[^\\s/(;)#|,=!>]{0,5}(number|code|num|no|id|amount))"
     tags:
       law: GDPR