Merge pull request #352 from Privado-Inc/dev

Dev
Privado-Inc · Nov 16, 2023 · c2a7c88 · c2a7c88
2 parents 4e39c2f + 6b673b1
commit c2a7c88
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 5 deletions.
diff --git a/config/exclusions/kotlin.yaml b/config/exclusions/kotlin.yaml
@@ -0,0 +1,5 @@
+exclusions:
+  - id: Exclusions.Template
+    name: Exclude template file
+    patterns:
+      - "(?i)(.*template.kt|.*template(s)?/.*)"
diff --git a/rules/collections/annotations/java.yaml b/rules/collections/annotations/java.yaml
@@ -2,7 +2,7 @@ collections:
   - id: Collections.Annotation.Spring
     name: Spring Web Interface Annotation
     patterns: 
-      - "RequestMapping|PostMapping|PutMapping|GetMapping|DeleteMapping"
+      - "RequestMapping|PostMapping|PutMapping|PatchMapping|GetMapping|DeleteMapping"
     tags:
 
   - id: Collections.Annotation.Struts

diff --git a/rules/sinks/third_parties/sdk/google/java.yaml b/rules/sinks/third_parties/sdk/google/java.yaml
@@ -961,7 +961,7 @@ sinks:
     domains:
       - "google.com/maps"
     patterns:
-      - "(?i)(com[.]google[.]maps[.]android|com[.]google[.]maps|com[.]google[.]android[.]gms[.]maps).*"
+      - "(?i)(com[.]google[.]maps[.]android|com[.]google[.]maps|com[.]google[.]android[.]gms[.]maps|com[.]google[.]android[.]geo).*"
     tags:
 
   - id: ThirdParties.SDK.Google.Pay
@@ -977,7 +977,7 @@ sinks:
     domains:
       - "play.google.com"
     patterns:
-      - "(?i)(com[.]google[.]ar[.]sceneform|com[.]google[.]ar|com[.]google[.]android[.]gms[.](games|wallet)).*"
+      - "(?i)(com[.]google[.]ar[.]sceneform|com[.]google[.]ar|com[.]google[.]android[.]gms[.](games|wallet)|com[.]android[.]billingclient[.]api[.]|com[.]google[.]android[.]gms[.]games).*"
     tags:
 
   - id: ThirdParties.SDK.Google.Crashlytics

diff --git a/rules/sinks/third_parties/sdk/twilio/java.yaml b/rules/sinks/third_parties/sdk/twilio/java.yaml
@@ -9,5 +9,5 @@ sinks:
     domains:
       - "twilio.com"
     patterns:
-      - "(?i)(com[.]twilio.*(sdk|jwt|http|rest|base|security|twiml|Twilio|connect|disconnect|release|initialize|getState|createDevice)).*"
+      - "(?i)(com[.]twilio.*(sdk|http|rest|base|security|twiml|Twilio|connect|disconnect|release|initialize|getState|createDevice))|(com[.]authy).*"
     tags:
diff --git a/rules/sources/location_data.yaml b/rules/sources/location_data.yaml
@@ -5,6 +5,6 @@ sources:
     isSensitive: False
     sensitivity: high
     patterns:
-      - "(?i)(.*(gps[^\\s/(;)#|,=!>]{0,3}(?:location|position|trace)|user[^\\s/(;)#|,=!>]{0,5}location|latitude|longitude|geo[^\\s/(;)#|,=!>]{0,5}coordinates)|(lat|lon|lng|latlng|latlon))"
+      - "(?i)(.*(gps[^\\s/(;)#|,=!>]{0,3}(?:location|position|trace)|user[^\\s/(;)#|,=!>]{0,5}location|latitude|longitude|geo[^\\s/(;)#|,=!>]{0,5}coordinates)|(lat|lon|latlng|latlon))"
     tags:
       law: GDPR