lib/contrast/agent/assess/rule/provider/hardcoded_password.rb in contrast-agent-4.6.0 vs lib/contrast/agent/assess/rule/provider/hardcoded_password.rb in contrast-agent-4.7.0

- old
+ new

@@ -27,10 +27,13 @@ PASSWORD_FIELD_NAMES = %w[PASSWORD PASSKEY PASSPHRASE SECRET].cs__freeze # These are markers whose presence indicates that a field is more # likely to be a descriptor or requirement than an actual password. # We should ignore fields that contain them. - NON_PASSWORD_PARTIAL_NAMES = %w[DATE FORGOT FORM ENCODE PATTERN PREFIX PROP SUFFIX URL BASE FILE URI].cs__freeze + NON_PASSWORD_PARTIAL_NAMES = %w[ + DATE FORGOT FORM ENCODE PATTERN PREFIX PROP SUFFIX URL BASE FILE + URI + ].cs__freeze # If the constant looks like a password and it doesn't look like a # password descriptor, it passes for this rule def name_passes? constant_string PASSWORD_FIELD_NAMES.any? { |name| constant_string.index(name) } &&