Skip to content

Commit 314622c

Browse files
committed
feat(schema): Split gzip warnings
1 parent 555da40 commit 314622c

File tree

1 file changed

+28
-4
lines changed

1 file changed

+28
-4
lines changed

src/schema/rules/checks/privacy.yaml

Lines changed: 28 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,41 @@
11
---
2-
GzipHeaderFields:
2+
GzipHeaderMtime:
33
issue:
4-
code: GZIP_HEADER_DATA
4+
code: GZIP_HEADER_MTIME
55
message: |
6-
The gzip header contains a non-zero timestamp or a non-empty filename and/or comment field.
7-
These may leak sensitive information or indicate a non-reproducible conversion process.
6+
The gzip header contains a non-zero timestamp.
7+
This may leak sensitive information or indicate a non-reproducible conversion process.
88
level: warning
99
selectors:
1010
- match(extension, ".gz$")
1111
- gzip != null
1212
checks:
1313
- gzip.timestamp == 0
14+
15+
GzipHeaderFilename:
16+
issue:
17+
code: GZIP_HEADER_FILENAME
18+
message: |
19+
The gzip header contains a non-empty filename.
20+
This may leak sensitive information or indicate a non-reproducible conversion process.
21+
level: warning
22+
selectors:
23+
- match(extension, ".gz$")
24+
- gzip.filename
25+
checks:
1426
- gzip.filename == ""
27+
28+
GzipHeaderComment:
29+
issue:
30+
code: GZIP_HEADER_COMMENT
31+
message: |
32+
The gzip header contains a non-empty comment field.
33+
This may leak sensitive information or indicate a non-reproducible conversion process.
34+
level: warning
35+
selectors:
36+
- match(extension, ".gz$")
37+
- gzip.comment
38+
checks:
1539
- gzip.comment == ""
1640

1741
CheckAge89:

0 commit comments

Comments
 (0)