fix(security): détecter les PIN dans les URL

2026-09-13 12:12:50 +02:00
parent 6609d5c4ca
commit 5dc0907ad4
2 changed files with 22 additions and 1 deletions
@@ -34,7 +34,7 @@ _UNQUOTED_SECRET_RE = re.compile(
    r"\s*[:=]\s*(?P<value>[a-z0-9][a-z0-9._~+/-]{2,})"
 )
 _URL_SECRET_RE = re.compile(
-    r"(?ix)[?&](?:api[_-]?key|access[_-]?token|auth(?:orization)?|icalsecurise|password|secret|token)"
+    r"(?ix)[?&](?:api[_-]?key|access[_-]?token|auth(?:orization)?|icalsecurise|password|pin|secret|token)"
    r"=([^&#\s]{3,})"
 )
 _URL_PLACEHOLDER_RE = re.compile(