From f6437df7522e513a56a5095ad74218edd19fb72a Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Wed, 29 Mar 2023 18:28:05 +0530 Subject: [PATCH 1/4] Python GA support --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 0b1b42af..65ba2ee1 100644 --- a/README.md +++ b/README.md @@ -7,7 +7,7 @@ Privado is an open-source static code analysis tool to discover data flows in th # Supported languages -We support Java in GA and Python in alpha. Our Enterprise offering covers all programming languages, and we're working on adding support for more languages to OSS. Support for JS/TS is coming soon! +We support Java and Python in GA. Our Enterprise offering covers all programming languages, and we're working on adding support for more languages to OSS. Support for JS/TS is coming soon! # Quick Start From 02d4be6e9755d4389d7afa57a4e88b71c2f029d2 Mon Sep 17 00:00:00 2001 From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com> Date: Sat, 15 Apr 2023 14:52:44 +0530 Subject: [PATCH 2/4] updated mac address rule (#225) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * updated mac address rule * removed workforce dir --------- Co-authored-by: “Hitesh --- rules/sources/online_identifiers.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/sources/online_identifiers.yaml b/rules/sources/online_identifiers.yaml index 1f282d66..c7f4acdc 100644 --- a/rules/sources/online_identifiers.yaml +++ b/rules/sources/online_identifiers.yaml @@ -35,7 +35,7 @@ sources: isSensitive: False sensitivity: medium patterns: - - "(?i)mac[^\\s/(;)#|,=!>]{0,2}(?:address|ip)|ip[^\\s/(;)#|,=!>]{0,2}mac" + - "(?i)(mac|ieee)[^\\s/(;)#|,=!>]{0,2}(?:address|ip)|ip[^\\s/(;)#|,=!>]{0,2}mac" tags: law: GDPR From bdb392b18330eba50d4d9131a95222d4503fe131 Mon Sep 17 00:00:00 2001 From: Datta Mundada Date: Wed, 19 Jul 2023 12:39:45 +0530 Subject: [PATCH 3/4] Ruby http libraries (#278) * Support for Ruby HTTP client rules * Update the apiHttpLibraries rule for ruby --- config/systemConfig/ruby.yaml | 12 ++++++++++++ rules/sinks/internal_apis/api/ruby.yaml | 6 ++++++ 2 files changed, 18 insertions(+) create mode 100644 config/systemConfig/ruby.yaml create mode 100644 rules/sinks/internal_apis/api/ruby.yaml diff --git a/config/systemConfig/ruby.yaml b/config/systemConfig/ruby.yaml new file mode 100644 index 00000000..8259aa9f --- /dev/null +++ b/config/systemConfig/ruby.yaml @@ -0,0 +1,12 @@ +systemConfig: + - key: apiHttpLibraries + value: (?i)(faraday|rest-client|httparty|http.client|net.http|curb|sawyer|unirest|excon|typhoeus|.*(Http(.){0,2}Client|RestClient|HTTParty|Faraday|Unirest)).* + + - key: ignoredSinks + value: (?i).*(?<=map|list|jsonobject|json|array|arrays|jsonnode|objectmapper|objectnode).*(put:|get:).* + + - key: apiSinks + value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit) + + - key: apiIdentifier + value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).* \ No newline at end of file diff --git a/rules/sinks/internal_apis/api/ruby.yaml b/rules/sinks/internal_apis/api/ruby.yaml new file mode 100644 index 00000000..3c5363a5 --- /dev/null +++ b/rules/sinks/internal_apis/api/ruby.yaml @@ -0,0 +1,6 @@ +sinks: + - id: Sinks.API.InternalAPI + name: Internal APIs + patterns: + - "((http|https|ftp|ssh):\\/\\/){0,1}(((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)\\.?\\b){4}|(localhost))(:[0-9]{2,4}){0,1}(\\/([a-z]){0,1}){0,1}.*" + tags: From aedbee7b60fca4563992d46859abc38a3df66304 Mon Sep 17 00:00:00 2001 From: Hitesh Mahajan Date: Sat, 22 Jul 2023 13:15:52 +0530 Subject: [PATCH 4/4] Update personal_characteristics.yaml --- rules/sources/personal_characteristics.yaml | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/rules/sources/personal_characteristics.yaml b/rules/sources/personal_characteristics.yaml index 5da4b181..79eb0a58 100644 --- a/rules/sources/personal_characteristics.yaml +++ b/rules/sources/personal_characteristics.yaml @@ -1,13 +1,13 @@ sources: - - id: Data.Sensitive.PersonalCharacteristics.Height - name: Height - category: Personal Characteristics - isSensitive: False - sensitivity: low - patterns: - - "(?i).*(height[^\\s/(;)#|,=!>]{0,5}(?:cms|inches|feet|meter|metre))|(?:body|person|patient|baby|student|user|girl|boy|male|female)[^\\s/(;)#|,=!>]{0,5}height|height" - tags: - law: GDPR + # - id: Data.Sensitive.PersonalCharacteristics.Height + # name: Height + # category: Personal Characteristics + # isSensitive: False + # sensitivity: low + # patterns: + # - "(?i).*(height[^\\s/(;)#|,=!>]{0,5}(?:cms|inches|feet|meter|metre))|(?:body|person|patient|baby|student|user|girl|boy|male|female)[^\\s/(;)#|,=!>]{0,5}height|height" + # tags: + # law: GDPR - id: Data.Sensitive.PersonalCharacteristics.MaritalStatus name: Marital Status