Merge pull request #363 from sublime-security/cd.target.es6-js

Adds keyword to js scanner to scan ECMA6 compliant js (#33)
target · Apr 18, 2023 · d6a1b8a · d6a1b8a
2 parents 3b40901 + e338d46
commit d6a1b8a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/configs/python/backend/taste/taste.yara b/configs/python/backend/taste/taste.yara
@@ -701,6 +701,7 @@ rule javascript_file {
         type = "script"
     strings:
         $var = { 76 61 72 20 } // var
+        $let = { 6C 65 74 20 } // let
         $function1 = { 66 75 6E 63 74 69 6F 6E } // function
         $function2 = { 28 66 75 6E 63 74 69 6F 6E } // (function
         $function3 = { 66 75 6E 63 74 69 6F 6E [0-1] 28 } // function[0-1](
@@ -720,6 +721,7 @@ rule javascript_file {
         $unescape = { 75 6E 65 73 63 61 70 65 28 } // unescape(
     condition:
         $var at 0 or
+        $let at 0 or
         $function1 at 0 or
         $function2 at 0 or
         $if at 0 or

diff --git a/src/python/strelka/config/taste.yara b/src/python/strelka/config/taste.yara
@@ -688,6 +688,7 @@ rule javascript_file {
         type = "script"
     strings:
         $var = { 76 61 72 20 } // var
+        $let = { 6C 65 74 20 } // let
         $function1 = { 66 75 6E 63 74 69 6F 6E } // function
         $function2 = { 28 66 75 6E 63 74 69 6F 6E } // (function
         $function3 = { 66 75 6E 63 74 69 6F 6E [0-1] 28 } // function[0-1](
@@ -707,6 +708,7 @@ rule javascript_file {
         $unescape = { 75 6E 65 73 63 61 70 65 28 } // unescape(
     condition:
         $var at 0 or
+        $let at 0 or
         $function1 at 0 or
         $function2 at 0 or
         $if at 0 or