From: twesterhever <40121680+twesterhever@users.noreply.github.com>
Date: Fri, 17 Feb 2023 16:01:16 +0000 (+0000)
Subject: [Enhancement] Add rule to detect Google Firebase URLs
X-Git-Tag: 3.5~48^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F4401%2Fhead;p=thirdparty%2Frspamd.git

[Enhancement] Add rule to detect Google Firebase URLs
---

diff --git a/rules/regexp/headers.lua b/rules/regexp/headers.lua
index e493a663e9..5cc107ab80 100644
--- a/rules/regexp/headers.lua
+++ b/rules/regexp/headers.lua
@@ -920,6 +920,13 @@ reconf['HAS_GOOGLE_REDIR'] = {
   group = 'experimental'
 }
 
+reconf['HAS_GOOGLE_FIREBASE_URL'] = {
+  re = '/\\.firebasestorage\\.googleapis\\.com\\//{url}i',
+  description = 'Contains firebasestorage.googleapis.com URL',
+  score = 0.01,
+  group = 'experimental'
+}
+
 reconf['XM_UA_NO_VERSION'] = {
   re = string.format('(!%s && !%s) && (%s || %s)',
       'X-Mailer=/https?:/H',