False positive `GURL original...` v. `GURL origin`

[fmarier]

Reference: brave/brave-core#21255 (comment)

False positive on this line:

security-action/assets/semgrep_rules/client/chromium-insecure-gurl.yaml

Line 14 in 10b0d57

regex: origin

GURL original_url; matches origin whereas for this rule we really meant to match GURL origin;

Proposed Solution

• Remove the rule
• Fork and improve the rule

[thypon]

@fmarier is this still worth implementing?

[fmarier]

I think so, GURL original_url is definitely okay and doesn't need to be flagged by the GURL origin rule.