Merge branch 'main' into aiden.dropbox.fix

sublime-security · Nov 29, 2023 · 501eedf · 501eedf
2 parents 84d1ee2 + 888954b
commit 501eedf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/insights/links/recipient_address_in_link.yml b/insights/links/recipient_address_in_link.yml
@@ -1,7 +1,7 @@
 name: "Recipient email in link"
 type: "query"
 source: |
-  distinct(map(filter(body.links, any(recipients.to, strings.icontains(..href_url.url, .email.email))), .href_url.url), .)
+  distinct(map(filter(body.links, any(recipients.to, strings.icontains(..href_url.url, .email.email) and any(recipients.to, .email.domain.valid))), .href_url.url), .)
 severity: "low"
 tags:
   - "Suspicious links"