feat:modify source regular matching rules

2026-04-30 11:15:13 +02:00 · 2022-02-02 00:10:15 +08:00
parent 012434b152
commit af2e8ff8c6
1 changed files with 1 additions and 1 deletions
--- a/python/ql/lib/semmle/python/security/dataflow/InsecureRandomnessCustomizations.qll
+++ b/python/ql/lib/semmle/python/security/dataflow/InsecureRandomnessCustomizations.qll
@@ -60,7 +60,7 @@ module InsecureRandomness {
  class RandomFnSink extends Sink {
    RandomFnSink() {
      exists(DataFlowCallable randomFn |
-        randomFn.getName().regexpMatch("(?i).*(gen(erate)?|salt|make|mk).*")
+        randomFn.getName().regexpMatch("(?i).*(gen(erate)?|make|mk|create).*(nonce|salt|pepper).*")
      |
        this.getEnclosingCallable() = randomFn
      )