From f6437df7522e513a56a5095ad74218edd19fb72a Mon Sep 17 00:00:00 2001
From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com>
Date: Wed, 29 Mar 2023 18:28:05 +0530
Subject: [PATCH 1/4] Python GA support
---
README.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/README.md b/README.md
index 0b1b42af..65ba2ee1 100644
--- a/README.md
+++ b/README.md
@@ -7,7 +7,7 @@ Privado is an open-source static code analysis tool to discover data flows in th
# Supported languages
-We support Java in GA and Python in alpha. Our Enterprise offering covers all programming languages, and we're working on adding support for more languages to OSS. Support for JS/TS is coming soon!
+We support Java and Python in GA. Our Enterprise offering covers all programming languages, and we're working on adding support for more languages to OSS. Support for JS/TS is coming soon!
# Quick Start
From 02d4be6e9755d4389d7afa57a4e88b71c2f029d2 Mon Sep 17 00:00:00 2001
From: hiteshbedre <32206192+hiteshbedre@users.noreply.github.com>
Date: Sat, 15 Apr 2023 14:52:44 +0530
Subject: [PATCH 2/4] updated mac address rule (#225)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
* updated mac address rule
* removed workforce dir
---------
Co-authored-by: “Hitesh
---
rules/sources/online_identifiers.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/rules/sources/online_identifiers.yaml b/rules/sources/online_identifiers.yaml
index 1f282d66..c7f4acdc 100644
--- a/rules/sources/online_identifiers.yaml
+++ b/rules/sources/online_identifiers.yaml
@@ -35,7 +35,7 @@ sources:
isSensitive: False
sensitivity: medium
patterns:
- - "(?i)mac[^\\s/(;)#|,=!>]{0,2}(?:address|ip)|ip[^\\s/(;)#|,=!>]{0,2}mac"
+ - "(?i)(mac|ieee)[^\\s/(;)#|,=!>]{0,2}(?:address|ip)|ip[^\\s/(;)#|,=!>]{0,2}mac"
tags:
law: GDPR
From bdb392b18330eba50d4d9131a95222d4503fe131 Mon Sep 17 00:00:00 2001
From: Datta Mundada
Date: Wed, 19 Jul 2023 12:39:45 +0530
Subject: [PATCH 3/4] Ruby http libraries (#278)
* Support for Ruby HTTP client rules
* Update the apiHttpLibraries rule for ruby
---
config/systemConfig/ruby.yaml | 12 ++++++++++++
rules/sinks/internal_apis/api/ruby.yaml | 6 ++++++
2 files changed, 18 insertions(+)
create mode 100644 config/systemConfig/ruby.yaml
create mode 100644 rules/sinks/internal_apis/api/ruby.yaml
diff --git a/config/systemConfig/ruby.yaml b/config/systemConfig/ruby.yaml
new file mode 100644
index 00000000..8259aa9f
--- /dev/null
+++ b/config/systemConfig/ruby.yaml
@@ -0,0 +1,12 @@
+systemConfig:
+ - key: apiHttpLibraries
+ value: (?i)(faraday|rest-client|httparty|http.client|net.http|curb|sawyer|unirest|excon|typhoeus|.*(Http(.){0,2}Client|RestClient|HTTParty|Faraday|Unirest)).*
+
+ - key: ignoredSinks
+ value: (?i).*(?<=map|list|jsonobject|json|array|arrays|jsonnode|objectmapper|objectnode).*(put:|get:).*
+
+ - key: apiSinks
+ value: (?i)(?:url|client|openConnection|request|execute|newCall|load|host|access|usequery|fetch|get|getInputStream|getApod|getForObject|getForEntity|list|set|put|post|proceed|trace|patch|Path|send|sendAsync|remove|delete|write|read|assignment|provider|exchange|postForEntity|call|createCall|createEndpoint|dispatch|invoke|newMessage|getInput|getOutput|getResponse|marshall|unmarshall|send|asyncSend|emit)
+
+ - key: apiIdentifier
+ value: (?i).*((hook|base|auth|prov|endp|install|cloud|host|request|service|gateway|route|resource|upload|api|worker)(.){0,12}url|(slack|web)(.){0,4}hook|(sentry|segment)(.){0,1}(dsn)|(rest|api|host|cloud|request|service)(.){0,4}(endpoint|gateway|route)).*
\ No newline at end of file
diff --git a/rules/sinks/internal_apis/api/ruby.yaml b/rules/sinks/internal_apis/api/ruby.yaml
new file mode 100644
index 00000000..3c5363a5
--- /dev/null
+++ b/rules/sinks/internal_apis/api/ruby.yaml
@@ -0,0 +1,6 @@
+sinks:
+ - id: Sinks.API.InternalAPI
+ name: Internal APIs
+ patterns:
+ - "((http|https|ftp|ssh):\\/\\/){0,1}(((25[0-5]|(2[0-4]|1\\d|[1-9]|)\\d)\\.?\\b){4}|(localhost))(:[0-9]{2,4}){0,1}(\\/([a-z]){0,1}){0,1}.*"
+ tags:
From aedbee7b60fca4563992d46859abc38a3df66304 Mon Sep 17 00:00:00 2001
From: Hitesh Mahajan
Date: Sat, 22 Jul 2023 13:15:52 +0530
Subject: [PATCH 4/4] Update personal_characteristics.yaml
---
rules/sources/personal_characteristics.yaml | 18 +++++++++---------
1 file changed, 9 insertions(+), 9 deletions(-)
diff --git a/rules/sources/personal_characteristics.yaml b/rules/sources/personal_characteristics.yaml
index 5da4b181..79eb0a58 100644
--- a/rules/sources/personal_characteristics.yaml
+++ b/rules/sources/personal_characteristics.yaml
@@ -1,13 +1,13 @@
sources:
- - id: Data.Sensitive.PersonalCharacteristics.Height
- name: Height
- category: Personal Characteristics
- isSensitive: False
- sensitivity: low
- patterns:
- - "(?i).*(height[^\\s/(;)#|,=!>]{0,5}(?:cms|inches|feet|meter|metre))|(?:body|person|patient|baby|student|user|girl|boy|male|female)[^\\s/(;)#|,=!>]{0,5}height|height"
- tags:
- law: GDPR
+ # - id: Data.Sensitive.PersonalCharacteristics.Height
+ # name: Height
+ # category: Personal Characteristics
+ # isSensitive: False
+ # sensitivity: low
+ # patterns:
+ # - "(?i).*(height[^\\s/(;)#|,=!>]{0,5}(?:cms|inches|feet|meter|metre))|(?:body|person|patient|baby|student|user|girl|boy|male|female)[^\\s/(;)#|,=!>]{0,5}height|height"
+ # tags:
+ # law: GDPR
- id: Data.Sensitive.PersonalCharacteristics.MaritalStatus
name: Marital Status