Skip to content

refactor: create 943120 .ra file#4506

Merged
fzipi merged 3 commits into
mainfrom
regex-assembly/943120
Mar 12, 2026
Merged

refactor: create 943120 .ra file#4506
fzipi merged 3 commits into
mainfrom
regex-assembly/943120

Conversation

@fzipi
Copy link
Copy Markdown
Member

@fzipi fzipi commented Mar 2, 2026

what

  • create regex-assembly/943120.ra for session fixation detection (session ID parameter names with no Referer)
  • add standard comment block to the rule in the conf file
  • toolchain optimized alternation with common prefix extraction (e.g. jsessionid|jservsession|jwsessionj(?:se(?:ssionid|rvsession)|wsession))

why

  • improve maintainability by using regex-assembly format
  • note: rule 943110 has a superset of these session names; a shared include could be created in a future refactor

refs

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Mar 2, 2026

📊 Quantitative test results for language: eng, year: 2023, size: 10K, paranoia level: 1:
🚀 Quantitative testing did not detect new false positives

@fzipi
Copy link
Copy Markdown
Member Author

fzipi commented Mar 2, 2026

Hmm.. this might be an include instead, it is shared with another rule.

Xhoenix
Xhoenix previously approved these changes Mar 2, 2026
@fzipi fzipi force-pushed the regex-assembly/943120 branch from fd15d92 to b581d40 Compare March 3, 2026 08:58
@fzipi fzipi changed the title refactor: create 943120 .ra file refactor: create 943120 .ra file Mar 3, 2026
@fzipi fzipi requested a review from Xhoenix March 9, 2026 16:37
@fzipi fzipi added this pull request to the merge queue Mar 12, 2026
Merged via the queue into main with commit 8a758a3 Mar 12, 2026
8 checks passed
@fzipi fzipi deleted the regex-assembly/943120 branch March 12, 2026 12:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants