url-constructor-base.yaml: add assignees

brave · Jul 21, 2023 · 84cfd95 · 84cfd95
1 parent 15dd28c
commit 84cfd95
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/assets/semgrep_rules/web/url-constructor-base.yaml b/assets/semgrep_rules/web/url-constructor-base.yaml
@@ -6,6 +6,9 @@ rules:
       references:
         - https://developer.mozilla.org/en-US/docs/Web/API/URL/URL#parameters
       source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/url-constructor-base.yaml
+      assignees: |
+        bcaller
+        thypon
     message: Are you using the `URL(url, base)` constructor as a security control
       to limit the origin with base `$BASE`?
       The base is ignored whenever url looks like an
@@ -24,4 +27,4 @@ rules:
       - pattern-not-inside: |
           $VAR = new URL($A, $BASE)
           ...
-          <... $VAR.origin ...>
+          <... $VAR.origin ...>