Add 'sad update' to spam detection rules (#3499)

peterdj45 · web-flow · commit b7ec389c8e06 · 2025-11-08T15:20:11.000Z
diff --git a/detection-rules/spam_fake_photo_share.yml b/detection-rules/spam_fake_photo_share.yml
@@ -22,6 +22,7 @@ source: |
                           "*image*",
                           "*sad news*",
                           "*sad announcement*",
+                          "*sad update*",
                           "*new pics*"
         )
       )
@@ -37,6 +38,7 @@ source: |
                             "*image*",
                             "*sad news*",
                             "*sad announcement*",
+                            "*sad update*",
                             "*new pics*"
           )
         )
@@ -48,6 +50,7 @@ source: |
                             "*image*",
                             "*sad news*",
                             "*sad announcement*",
+                            "*sad update*",
                             "*new pics*"
           )
           and not strings.icontains(body.plain.raw, "[cid:image")
@@ -60,6 +63,7 @@ source: |
                             "*image*",
                             "*sad news*",
                             "*sad announcement*",
+                            "*sad update*",
                             "*new pics*"
           )
         )
@@ -93,6 +97,7 @@ source: |
                           "*image*",
                           "*sad news*",
                           "*sad announcement*",
+                          "*sad update*",
                           "*pics*"
         )
         and not strings.istarts_with(body.plain.raw, "[cid:image")

Original file line number	Diff line number	Diff line change
`@@ -22,6 +22,7 @@ source: \|`
`22`	`22`	`"image",`
`23`	`23`	`"sad news",`
`24`	`24`	`"sad announcement",`
	`25`	`+ "sad update",`
`25`	`26`	`"new pics"`
`26`	`27`	`)`
`27`	`28`	`)`
`@@ -37,6 +38,7 @@ source: \|`
`37`	`38`	`"image",`
`38`	`39`	`"sad news",`
`39`	`40`	`"sad announcement",`
	`41`	`+ "sad update",`
`40`	`42`	`"new pics"`
`41`	`43`	`)`
`42`	`44`	`)`
`@@ -48,6 +50,7 @@ source: \|`
`48`	`50`	`"image",`
`49`	`51`	`"sad news",`
`50`	`52`	`"sad announcement",`
	`53`	`+ "sad update",`
`51`	`54`	`"new pics"`
`52`	`55`	`)`
`53`	`56`	`and not strings.icontains(body.plain.raw, "[cid:image")`
`@@ -60,6 +63,7 @@ source: \|`
`60`	`63`	`"image",`
`61`	`64`	`"sad news",`
`62`	`65`	`"sad announcement",`
	`66`	`+ "sad update",`
`63`	`67`	`"new pics"`
`64`	`68`	`)`
`65`	`69`	`)`
`@@ -93,6 +97,7 @@ source: \|`
`93`	`97`	`"image",`
`94`	`98`	`"sad news",`
`95`	`99`	`"sad announcement",`
	`100`	`+ "sad update",`
`96`	`101`	`"pics"`
`97`	`102`	`)`
`98`	`103`	`and not strings.istarts_with(body.plain.raw, "[cid:image")`