Merge pull request #155 from zh54321/patch-2

l0ss · web-flow · commit 36903dca62d8 · 2024-10-15T08:42:41.000+08:00
Change an existing rule to find more candy.
diff --git a/Snaffler/SnaffRules/DefaultRules/FileRules/Keep/Code/KeepPassOrKeyInCode.toml b/Snaffler/SnaffRules/DefaultRules/FileRules/Keep/Code/KeepPassOrKeyInCode.toml
@@ -12,7 +12,7 @@ WordList = ["passw?o?r?d\\s*=\\s*[\\'\\\"][^\\'\\\"]....",
 "passw?o?r?d?>.{3,2000}</pass",
 "api[kK]ey>\\s*[^\\s<]+\\s*<",
 "[_\\-\\.]oauth\\s*=\\s*[\\'\\\"][^\\'\\\"]....",
-"client_secret\\s*=\\s*[\\'\\\"][^\\'\\\"]....",
+"client_secret\\s*=*\\s*",
 "<ExtendedMatchKey>ClientAuth",
 "GIUserPassword"
 ]

Original file line number	Diff line number	Diff line change
`@@ -12,7 +12,7 @@ WordList = ["passw?o?r?d\\s=\\s[\\'\\\"][^\\'\\\"]....",`
`12`	`12`	`"passw?o?r?d?>.{3,2000}</pass",`
`13`	`13`	`"api[kK]ey>\\s[^\\s<]+\\s<",`
`14`	`14`	`"[_\\-\\.]oauth\\s=\\s[\\'\\\"][^\\'\\\"]....",`
`15`		`-"client_secret\\s=\\s[\\'\\\"][^\\'\\\"]....",`
	`15`	`+"client_secret\\s=\\s*",`
`16`	`16`	`"<ExtendedMatchKey>ClientAuth",`
`17`	`17`	`"GIUserPassword"`
`18`	`18`	`]`