commit ac6d1a6: [Minor] Implement multibase prefixes for IPFS gateway URL rule

GitHub noreply at github.com
Mon Feb 20 21:42:06 UTC 2023


Author: twesterhever
Date: 2022-11-06 14:41:55 +0000
URL: https://github.com/rspamd/rspamd/commit/ac6d1a6566a4ecf3e4ff75c27047d1f9ef2f01d7

[Minor] Implement multibase prefixes for IPFS gateway URL rule

---
 rules/regexp/misc.lua | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/regexp/misc.lua b/rules/regexp/misc.lua
index 47b8f74a9..940a9187e 100644
--- a/rules/regexp/misc.lua
+++ b/rules/regexp/misc.lua
@@ -105,8 +105,8 @@ rspamd_config:register_dependency('LEAKED_PASSWORD_SCAM', 'BITCOIN_ADDR')
 -- These contain "ipfs" somewhere (either in the FQDN or the URL path) and a
 -- content identifier (CID), comprising of either "qm", followed by 46 alphanumerical
 -- characters (CIDv0), or a CIDv1 of an alphanumerical string of unspecified length,
--- depending on the hash algorithm used.
-local ipfs_cid = '/(qm[a-z0-9]{44}|[a-z0-9]{45,256})/{url}i'
+-- depending on the hash algorithm used, but starting with a multibase prefix.
+local ipfs_cid = '/(qm[a-z0-9]{44}|[079fFvVtTbBcChkKzZmMuUP][a-z0-9]{45,256})/{url}i'
 local ipfs_string = '/ipfs(\\.|-|_|\\/|\\?)/{url}i'
 reconf['HAS_IPFS_GATEWAY_URL'] = {
   description = 'Message contains InterPlanetary File System (IPFS) gateway URL, likely malicious',


More information about the Commits mailing list