Skip to content

Commit

Permalink
Exclude new private heuristics from swift sensitive credential
Browse files Browse the repository at this point in the history
  • Loading branch information
joefarebrother committed May 7, 2024
1 parent 08f5eab commit b3d9a6f
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions swift/ql/lib/codeql/swift/security/SensitiveExprs.qll
Original file line number Diff line number Diff line change
Expand Up @@ -49,6 +49,7 @@ class SensitiveCredential extends SensitiveDataType, TCredential {
exists(SensitiveDataClassification classification |
not classification = SensitiveDataClassification::password() and // covered by `SensitivePassword`
not classification = SensitiveDataClassification::id() and // not accurate enough
not classification = SensitiveDataClassification::private() and // covered by `SensitivePrivateInfo`
result = HeuristicNames::maybeSensitiveRegexp(classification)
)
or
Expand Down

0 comments on commit b3d9a6f

Please sign in to comment.