feat:modify source regular matching rules

liangjinhuang · liangjinhuang · commit af2e8ff8c67a · 2022-02-02T00:10:15.000+08:00
diff --git a/python/ql/lib/semmle/python/security/dataflow/InsecureRandomnessCustomizations.qll b/python/ql/lib/semmle/python/security/dataflow/InsecureRandomnessCustomizations.qll
@@ -60,7 +60,7 @@ module InsecureRandomness {
   class RandomFnSink extends Sink {
     RandomFnSink() {
       exists(DataFlowCallable randomFn |
-        randomFn.getName().regexpMatch("(?i).*(gen(erate)?|salt|make|mk).*")
+        randomFn.getName().regexpMatch("(?i).*(gen(erate)?|make|mk|create).*(nonce|salt|pepper).*")
       |
         this.getEnclosingCallable() = randomFn
       )

Original file line number	Diff line number	Diff line change
`@@ -60,7 +60,7 @@ module InsecureRandomness {`
`60`	`60`	`class RandomFnSink extends Sink {`
`61`	`61`	`RandomFnSink() {`
`62`	`62`	`exists(DataFlowCallable randomFn \|`
`63`		`- randomFn.getName().regexpMatch("(?i).(gen(erate)?\|salt\|make\|mk).")`
	`63`	`+ randomFn.getName().regexpMatch("(?i).(gen(erate)?\|make\|mk\|create).(nonce\|salt\|pepper).*")`
`64`	`64`	`\|`
`65`	`65`	`this.getEnclosingCallable() = randomFn`
`66`	`66`	`)`