From 20d20b57ac343b3a48293e8a355ca8c4bd1a5f8e Mon Sep 17 00:00:00 2001
From: Tim Clifford <tim.clifford@amazee.com>
Date: Thu, 28 Jan 2021 15:29:09 +0000
Subject: [PATCH] adding files/private to exclude list

---
 Policies/database_exposure.policy.yml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/Policies/database_exposure.policy.yml b/Policies/database_exposure.policy.yml
index 45e45ef..6b79a2e 100644
--- a/Policies/database_exposure.policy.yml
+++ b/Policies/database_exposure.policy.yml
@@ -28,7 +28,8 @@ parameters:
     description: 'Database file extensions to look for.'
     type: string
   exclude:
-      default:
-        - core
-      description: 'Directories to exclude from find'
+    default:
+      - core
+      - sites/default/files/private
+    description: 'Directories to exclude from find'
 severity: 'critical'