Add span boundary for ellipsis patterns

This prevents multiline span matching across different commands in some edge cases.
trailofbits · Jan 24, 2024 · b8e2c7b · b8e2c7b
1 parent fe5f660
commit b8e2c7b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/generic/tar-insecure-flags.yaml b/generic/tar-insecure-flags.yaml
@@ -13,6 +13,8 @@ rules:
       impact: HIGH
       references:
         - https://man7.org/linux/man-pages/man1/tar.1.html
+    options:
+      generic_ellipsis_max_span: 0
     pattern-either:
       # A space character was left at the end of some patterns to help ensure
       # that the intended flag was used, and minimize the chance that another,