From: Vsevolod Stakhov <vsevolod@rspamd.com>
Date: Fri, 17 Feb 2023 21:52:53 +0000 (+0000)
Subject: Merge pull request #4401 from twesterhever/temp-google-firebase
X-Git-Tag: 3.5~48
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=172fb63b8111b0073bebf138b861d473ece3b8a7;p=thirdparty%2Frspamd.git

Merge pull request #4401 from twesterhever/temp-google-firebase

[Enhancement] Add rule to detect Google Firebase URLs
---

172fb63b8111b0073bebf138b861d473ece3b8a7
diff --cc rules/regexp/headers.lua
index c955611634,5cc107ab80..8734c8cb4d
--- a/rules/regexp/headers.lua
+++ b/rules/regexp/headers.lua
@@@ -916,10 -916,17 +916,17 @@@ reconf['HAS_GUC_PROXY_URI'] = 
  reconf['HAS_GOOGLE_REDIR'] = {
    re = '/\\.google\\.com\\/url\\?/{url}i',
    description = 'Has google.com/url redirection',
 -  score = 0.01,
 -  group = 'experimental'
 +  score = 1.0,
 +  group = 'url'
  }
  
+ reconf['HAS_GOOGLE_FIREBASE_URL'] = {
+   re = '/\\.firebasestorage\\.googleapis\\.com\\//{url}i',
+   description = 'Contains firebasestorage.googleapis.com URL',
+   score = 0.01,
+   group = 'experimental'
+ }
+ 
  reconf['XM_UA_NO_VERSION'] = {
    re = string.format('(!%s && !%s) && (%s || %s)',
        'X-Mailer=/https?:/H',