Update phishing protection datasets to 1742170#5197
Open
github-actions[bot] wants to merge 1 commit into
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Processing phishingHashPrefix
Embedded SHA256: 39af079059a0536b6f47591d1e99fee02a16e8e0a83b50bc188b2679c5ab9d0f
Fetching https://duckduckgo.com/api/protection/hashPrefix?category=phishing
Embedded revision: 1852160, remote revision: 1852166
writing to /home/runner/work/apple-browsers/apple-browsers/apple-monorepo/macOS/DuckDuckGo/MaliciousSiteProtection/Resources/phishingHashPrefixes.json
New SHA256: b78d7a473653099e0cff975f690d7f406cb216811e101d8c2277f4531dd83aed ✨
✅ phishingEmbeddedHashPrefixDataSHA updated with 616421 records
Processing phishingFilterSet
Embedded SHA256: 140a360dd02a471aa5471f0844e6e9f477afee9287b14957107c156cccbf796e
Fetching https://duckduckgo.com/api/protection/filterSet?category=phishing
Embedded revision: 1852160, remote revision: 1852166
writing to /home/runner/work/apple-browsers/apple-browsers/apple-monorepo/macOS/DuckDuckGo/MaliciousSiteProtection/Resources/phishingFilterSet.json
New SHA256: e1ec95b440f7352ad52ba0ea138f05bbafaf6d9d65834a39b939a7ed3feac7bc ✨
✅ phishingEmbeddedFilterSetDataSHA updated with 253778 records
Processing malwareHashPrefix
Embedded SHA256: 0fb973b202fea16bef16f4cc067728044d512ccbc1fbe1bbd936151c19d4d95d
Fetching https://duckduckgo.com/api/protection/hashPrefix?category=malware
Embedded revision: 1852160, remote revision: 1852159
writing to /home/runner/work/apple-browsers/apple-browsers/apple-monorepo/macOS/DuckDuckGo/MaliciousSiteProtection/Resources/malwareHashPrefixes.json
🆗 Data not modified. Number of records: 5859
Processing malwareFilterSet
Embedded SHA256: 24a4fcd634120c7b70050128e675ed36ae22655e8e6a20e32d33f0afea06bb90
Fetching https://duckduckgo.com/api/protection/filterSet?category=malware
Embedded revision: 1852160, remote revision: 1852163
writing to /home/runner/work/apple-browsers/apple-browsers/apple-monorepo/macOS/DuckDuckGo/MaliciousSiteProtection/Resources/malwareFilterSet.json
🆗 Data not modified. Number of records: 858
Processing scamHashPrefix
Embedded SHA256: f727361e619b9c8d7ae3e54807de4786600a42303ac9c748256577ee88535531
Fetching https://duckduckgo.com/api/protection/hashPrefix?category=scam
Embedded revision: 1852160, remote revision: 1852162
writing to /home/runner/work/apple-browsers/apple-browsers/apple-monorepo/macOS/DuckDuckGo/MaliciousSiteProtection/Resources/scamHashPrefixes.json
New SHA256: 1b66b283511e9228f6aaf76e86896835865a1cd16b1f3b25f6e47c8b57802902 ✨
✅ scamEmbeddedHashPrefixDataSHA updated with 13131 records
Processing scamFilterSet
Embedded SHA256: 70281ab86acd62fc5469e7ccd92b2b5d218f70b5c6311c21f269c204d341da5e
Fetching https://duckduckgo.com/api/protection/filterSet?category=scam
Embedded revision: 1852160, remote revision: 1852171
writing to /home/runner/work/apple-browsers/apple-browsers/apple-monorepo/macOS/DuckDuckGo/MaliciousSiteProtection/Resources/scamFilterSet.json
🆗 Data not modified. Number of records: 1995
Using minimum revision: 1852163 (phishing: 1852166, malware: 1852163, scam: 1852171)
Updated revision from 1852160 to 1852163
Note
Medium Risk
Changes offline threat lists and integrity hashes used for URL blocking; incorrect data could affect false positives/negatives until remote updates apply.
Overview
Refreshes embedded malicious site protection data shipped with the macOS app by bumping
EmbeddedDataProvidermetadata inMaliciousSiteProtectionManager.swift.embeddedDataRevisionmoves from 1742170 to 1852163 (minimum revision across phishing, malware, and scam feeds). All six SHA-256 constants for bundled phishing, malware, and scam hash-prefix and filter-set JSON are updated so runtime verification matches the new on-disk resources.Per the automation notes, phishing hash-prefix and filter-set bundles were regenerated (large record counts); scam hash-prefix data changed; malware hash/filter and scam filter content were already current but constants now reflect the synced revision 1852163.
Reviewed by Cursor Bugbot for commit 9ce828f. Bugbot is set up for automated code reviews on this repo. Configure here.