Skip to content

Commit 36a1b18

Browse files
committed
Ruby: revert SensitiveDataHeuristics changes
1 parent cda7d84 commit 36a1b18

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

ruby/ql/lib/codeql/ruby/security/internal/SensitiveDataHeuristics.qll

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -96,15 +96,14 @@ module HeuristicNames {
9696
* Gets a regular expression that identifies strings that may indicate the presence of data
9797
* that is hashed or encrypted, and hence rendered non-sensitive, or contains special characters
9898
* suggesting nouns within the string do not represent the meaning of the whole string (e.g. a URL or a SQL query).
99-
*`@` is not considered to be a special character as it may appear in the names of class or instance variables.
10099
*
101100
* We also filter out common words like `certain` and `concert`, since otherwise these could
102101
* be matched by the certificate regular expressions. Same for `accountable` (account), or
103102
* `secretarial` (secret).
104103
*/
105104
string notSensitiveRegexp() {
106105
result =
107-
"(?is).*([^\\w$.-@]|redact|censor|obfuscate|hash|md5|sha|random|((?<!un)(en))?(crypt|code)|certain|concert|secretar|accountant|accountab).*"
106+
"(?is).*([^\\w$.-]|redact|censor|obfuscate|hash|md5|sha|random|((?<!un)(en))?(crypt|code)|certain|concert|secretar|accountant|accountab).*"
108107
}
109108

110109
/**

0 commit comments

Comments
 (0)