fix(security): détecter les PIN Pronote littéraux #53
@@ -34,7 +34,7 @@ _UNQUOTED_SECRET_RE = re.compile(
|
|||||||
r"\s*[:=]\s*(?P<value>[a-z0-9][a-z0-9._~+/-]{2,})"
|
r"\s*[:=]\s*(?P<value>[a-z0-9][a-z0-9._~+/-]{2,})"
|
||||||
)
|
)
|
||||||
_URL_SECRET_RE = re.compile(
|
_URL_SECRET_RE = re.compile(
|
||||||
r"(?ix)[?&](?:api[_-]?key|access[_-]?token|auth(?:orization)?|icalsecurise|password|pin|secret|token)"
|
r"(?ix)[?&](?:api[_-]?key|access[_-]?token|auth(?:orization)?|icalsecurise|password|secret|token)"
|
||||||
r"=([^&#\s]{3,})"
|
r"=([^&#\s]{3,})"
|
||||||
)
|
)
|
||||||
_URL_PLACEHOLDER_RE = re.compile(
|
_URL_PLACEHOLDER_RE = re.compile(
|
||||||
|
|||||||
Reference in New Issue
Block a user