Sync with upstream#169
Conversation
Signed-off-by: amastellone-ict <amastellone@intellicomp.net>
Signed-off-by: amastellone-ict <amastellone@intellicomp.net>
Signed-off-by: amastellone-ict <amastellone@intellicomp.net>
Signed-off-by: amastellone-ict <amastellone@intellicomp.net>
Signed-off-by: amastellone-ict <amastellone@intellicomp.net>
Signed-off-by: amastellone-ict <amastellone@intellicomp.net>
Signed-off-by: amastellone-ict <amastellone@intellicomp.net>
Signed-off-by: amastellone-ict <amastellone@intellicomp.net>
Signed-off-by: amastellone-ict <amastellone@intellicomp.net>
Signed-off-by: amastellone-ict <amastellone@intellicomp.net>
|
🔒 This PR will now be automatically closed due to the above rules. |
|
Er... I didn't mean to do this. Sorry. |
There was a problem hiding this comment.
Pull request overview
This PR syncs the extension’s phishing detection configuration (rules/detection-rules.json) with an updated upstream ruleset, refreshing rule metadata and expanding/adjusting detection and exclusion patterns used by the content script.
Changes:
- Bumps ruleset metadata (
version,lastUpdated) and extendsmicrosoft_domain_patterns/exclusion_system.domain_patterns. - Refactors some detection requirement indicators (e.g., Segoe UI and layout checks) to new rule structures and tightens some code-obfuscation thresholds.
- Adds a new (currently disabled)
domain_squattingconfiguration block.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "^https:\\/\\/[^/]*\\.github\\.io(/.*)?$", | ||
| "^https://[^/]*\\.huntress.io(/.*)?$", | ||
| "^https://ltshare\\.intelli-comp\\.com(/.*)?$", | ||
| "^https://[^/]*\\.intellicomp.net(/.*)?$", |
| "id": "segoe_ui_font", | ||
| "type": "source_content", | ||
| "pattern": "Segoe\\s+UI(?:\\s+(?:Webfont|Symbol|Historic|Emoji))?", | ||
| "type": "code_driven", |
| "display:\\s*grid.*place-items:\\s*center", | ||
| "height:\\s*100vh.*width:\\s*100vw" | ||
| ], | ||
| "type": "code_driven", |
| "^https:\\/\\/github\\.com$", | ||
| "^https:\\/\\/raw\\.githubusercontent\\.com$", |
No description provided.