Merge pull request #370 from Privado-Inc/dev

refine cookie storage rule (#369)
Privado-Inc · Dec 8, 2023 · c37194a · c37194a
2 parents 45407d5 + f8d4b82
commit c37194a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/rules/sinks/storages/cookiemanager/javascript.yaml b/rules/sinks/storages/cookiemanager/javascript.yaml
@@ -9,7 +9,7 @@ sinks:
   - id: Storages.Web.Cookie.Write
     name: Web Storage Cookie(Write)
     patterns:
-      - "(?i)(.*cookie.*set.*)|(.*setCookie)"
+      - "(?i)(.*cookie[^{}()]*set.*)|(.*:setcookie)"
     tags:
 
   - id: Storages.Web.Cookie.Delete
@@ -48,4 +48,4 @@ sinks:
     name: Web SessionStorage(Read)
     patterns:
       - "(?i)(\\bstorage\\b|sessionstorage)(.*)(getItem)"
-    tags:
+    tags: