fix: regex for removing tags inside links (phishing filter)

Julian Field MailScanner at ecs.soton.ac.uk
Tue May 22 21:59:27 IST 2007



Juan Pablo Salazar Bertín wrote:
> Julian Field <MailScanner <at> ecs.soton.ac.uk> writes:
>
>   
>> Can you give me a simple example of mine doing it wrong where yours does 
>> it better please?
>> I need to see your patch in action before accepting it.
>>
>> Jules
>>
>>     
>
>
> Hi Julian, here's a sample of a link that is recognized as phishing:
>
> <A=20
>                         =
> href=3D"https://www.aa.com/content/espanol/ofertasEspeciales/ofertas/netS=
> AAversLatam.jhtml"=20
>                         target=3D_blank><BR><IMG alt=3D"Net SAAvers>>" =
> hspace=3D10=20
>                         =
> src=3D"https://www.aa.com/content/images/espanol/mailouts/pageNetSaaversC=
> L.jpg"=20
>                         align=3Dtop border=3D0></A>
>
> I recommend you to read the blog post, since the blogger's first approach is
> something very similar to yours.
>
> If you need more info, please let me know. Regards.
>   
Okay, I understand now, the blog post at least attempts to explain it 
:-) Explaining big regexps never was very easy!
It will be in the next release (4.60.4).


Jules

-- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk




-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk



More information about the MailScanner mailing list