Skip to content

Commit

Permalink
feat(schema): Split gzip warnings
Browse files Browse the repository at this point in the history
  • Loading branch information
effigies committed Aug 19, 2024
1 parent abae7be commit ad33de8
Showing 1 changed file with 28 additions and 4 deletions.
32 changes: 28 additions & 4 deletions src/schema/rules/checks/privacy.yaml
Original file line number Diff line number Diff line change
@@ -1,17 +1,41 @@
---
GzipHeaderFields:
GzipHeaderMtime:
issue:
code: GZIP_HEADER_DATA
code: GZIP_HEADER_MTIME
message: |
The gzip header contains a non-zero timestamp or a non-empty filename and/or comment field.
These may leak sensitive information or indicate a non-reproducible conversion process.
The gzip header contains a non-zero timestamp.
This may leak sensitive information or indicate a non-reproducible conversion process.
level: warning
selectors:
- match(extension, ".gz$")
- gzip != null
checks:
- gzip.timestamp == 0

GzipHeaderFilename:
issue:
code: GZIP_HEADER_FILENAME
message: |
The gzip header contains a non-empty filename.
This may leak sensitive information or indicate a non-reproducible conversion process.
level: warning
selectors:
- match(extension, ".gz$")
- gzip.filename
checks:
- gzip.filename == ""

GzipHeaderComment:
issue:
code: GZIP_HEADER_COMMENT
message: |
The gzip header contains a non-empty comment field.
This may leak sensitive information or indicate a non-reproducible conversion process.
level: warning
selectors:
- match(extension, ".gz$")
- gzip.comment
checks:
- gzip.comment == ""

CheckAge89:
Expand Down

0 comments on commit ad33de8

Please sign in to comment.