Fix funding policy compliance check false positive

OWASP · Sep 5, 2024 · 92057bc · 92057bc
1 parent 509a033
commit 92057bc
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/backend/apps/github/utils.py b/backend/apps/github/utils.py
@@ -22,7 +22,9 @@ def check_funding_policy_compliance(platform, target):
     if platform == "github":
         return target.lower() == "owasp"
     if platform == "custom":
-        return urlparse(target).netloc.lower() == "owasp.org"
+        location = urlparse(target).netloc.lower()
+        owasp_org = "owasp.org"
+        return location == owasp_org or location.endswith(f".{owasp_org}")
 
     return False
 

diff --git a/backend/tests/github/utils_tests.py b/backend/tests/github/utils_tests.py
@@ -7,9 +7,10 @@
     ("platform", "target", "as_expected"),
     [
         # Compliant
+        ("custom", "https://domain.owasp.org/sponsorship/", True),
+        ("custom", "https://owasp.org/donate", True),
         ("github", "owasp", True),
         ("github", "OWASP", True),
-        ("custom", "https://owasp.org/donate", True),
         # Non-compliant
         ("custom", "https://my-site.com/donate", False),
         ("custom", "https://my-site.com/owasp/donate", False),