---
trojan-source:
    description: Trojan Source attack - CVE-2021-42572
    include:
        - .
    exclude:
        - testing/web-platform/tests/conformance-checkers/tools/ins-del-datetime.py
        - modules/freetype2/src/autofit/afblue.c
        - third_party/abseil-cpp/absl/log/log_format_test.cc
        - third_party/abseil-cpp/absl/strings/internal/utf8_test.cc
        - third_party/aom/test/dr_prediction_test.cc
        # TODO: Remove this when https://github.com/jaraco/zipp/pull/125 lands
        # to setuptools
        - third_party/python/setuptools/setuptools/_vendor/zipp/__init__.py
        - third_party/rust/askama_parser/src/memchr_splitter.rs
        - third_party/rust/chardetng/src/data.rs
        - third_party/rust/clap_builder/src/output/textwrap/core.rs
        - third_party/rust/textwrap/src/core.rs
        - third_party/rust/icu_provider/src/hello_world.rs
        - third_party/rust/icu_segmenter/src/grapheme.rs
        - third_party/rust/icu_segmenter/src/line.rs
        - third_party/rust/ron/src/util/span_substring.rs
        - third_party/rust/objc2-foundation/src/tests/string.rs
        - third_party/rust/objc2-metal/src/generated/MTLCaptureManager.rs
        - third_party/rust/unicode-width/src/lib.rs
        - third_party/rust/unicode-width/tests/tests.rs
        - security/nss/gtests/mozpkix_gtest/pkixnames_tests.cpp
        - testing/web-platform/tests/webdriver/tests/bidi/input/perform_actions/key_tentative.py
        - testing/web-platform/tests/webdriver/tests/classic/perform_actions/key_tentative.py
    include_third_party: true
    extensions:
        - .c
        - .cc
        - .cpp
        - .h
        - .py
        - .rs
    support-files:
        - 'tools/lint/mozcheck/**'
    type: external
    payload: mozcheck:lint
    check: trojan-source
