lib/contrast/agent/assess/rule/provider/hardcoded_password.rb in contrast-agent-4.6.0 vs lib/contrast/agent/assess/rule/provider/hardcoded_password.rb in contrast-agent-4.7.0
- old
+ new
@@ -27,10 +27,13 @@
PASSWORD_FIELD_NAMES = %w[PASSWORD PASSKEY PASSPHRASE SECRET].cs__freeze
# These are markers whose presence indicates that a field is more
# likely to be a descriptor or requirement than an actual password.
# We should ignore fields that contain them.
- NON_PASSWORD_PARTIAL_NAMES = %w[DATE FORGOT FORM ENCODE PATTERN PREFIX PROP SUFFIX URL BASE FILE URI].cs__freeze
+ NON_PASSWORD_PARTIAL_NAMES = %w[
+ DATE FORGOT FORM ENCODE PATTERN PREFIX PROP SUFFIX URL BASE FILE
+ URI
+ ].cs__freeze
# If the constant looks like a password and it doesn't look like a
# password descriptor, it passes for this rule
def name_passes? constant_string
PASSWORD_FIELD_NAMES.any? { |name| constant_string.index(name) } &&