commit 172fb63: Merge pull request #4401 from twesterhever/temp-google-firebase

[GitHub]

Author: Vsevolod Stakhov
Date: 2023-02-17 21:52:53 +0000
URL: https://github.com/rspamd/rspamd/commit/172fb63b8111b0073bebf138b861d473ece3b8a7

Merge pull request #4401 from twesterhever/temp-google-firebase
[Enhancement] Add rule to detect Google Firebase URLs

 rules/regexp/headers.lua | 7 +++++++
 1 file changed, 7 insertions(+)

diff --combined rules/regexp/headers.lua
index c95561163,5cc107ab8..8734c8cb4
--- a/rules/regexp/headers.lua
+++ b/rules/regexp/headers.lua
@@@ -908,18 -908,25 +908,25 @@@ reconf['HAS_LIST_UNSUB'] = 
  
  reconf['HAS_GUC_PROXY_URI'] = {
    re = '/\\.googleusercontent\\.com\\/proxy/{url}i',
 -  description = 'Has googleusercontent.com proxy URI',
 -  score = 0.01,
 -  group = 'experimental'
 +  description = 'Has googleusercontent.com proxy URL',
 +  score = 1.0,
 +  group = 'url'
  }
  
  reconf['HAS_GOOGLE_REDIR'] = {
    re = '/\\.google\\.com\\/url\\?/{url}i',
    description = 'Has google.com/url redirection',
 -  score = 0.01,
 -  group = 'experimental'
 +  score = 1.0,
 +  group = 'url'
  }
  
+ reconf['HAS_GOOGLE_FIREBASE_URL'] = {
+   re = '/\\.firebasestorage\\.googleapis\\.com\\//{url}i',
+   description = 'Contains firebasestorage.googleapis.com URL',
+   score = 0.01,
+   group = 'experimental'
+ }
+ 
  reconf['XM_UA_NO_VERSION'] = {
    re = string.format('(!%s && !%s) && (%s || %s)',
        'X-Mailer=/https?:/H',