dd-trace/packages/dd-trace/src/appsec/iast/analyzers/hardcoded-password-rules.js

Datadog APM tracing client for JavaScript

/* eslint-disable @stylistic/js/max-len */
'use strict'

const { NameAndValue } = require('./hardcoded-rule-type')

module.exports = [
  {
    id: 'hardcoded-password',
    regex: /(?:pwd|pswd|pass|secret)(?:[0-9a-z\-_\t.]{0,20})(?:[\s|']|[\s|""]){0,3}(?:=|>|:{1,3}=|\|\|:|<=|=>|:|\?=)(?:'|""|\s|=|\x60){0,5}([0-9a-z\-_.=]{10,150})(?:['"\s\x60;]|$)/i,
    type: NameAndValue
  }
]