fix: regex for removing tags inside links (phishing filter)

Juan Pablo Salazar Bertín snifer_ at hotmail.com
Tue May 22 21:23:19 IST 2007


Julian Field <MailScanner <at> ecs.soton.ac.uk> writes:

> 
> 
> Can you give me a simple example of mine doing it wrong where yours does 
> it better please?
> I need to see your patch in action before accepting it.
> 
> Jules
> 


Hi Julian, here's a sample of a link that is recognized as phishing:

<A=20
                        =
href=3D"https://www.aa.com/content/espanol/ofertasEspeciales/ofertas/netS=
AAversLatam.jhtml"=20
                        target=3D_blank><BR><IMG alt=3D"Net SAAvers>>" =
hspace=3D10=20
                        =
src=3D"https://www.aa.com/content/images/espanol/mailouts/pageNetSaaversC=
L.jpg"=20
                        align=3Dtop border=3D0></A>

I recommend you to read the blog post, since the blogger's first approach is
something very similar to yours.

If you need more info, please let me know. Regards.




More information about the MailScanner mailing list