OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: body_checks for <img src tags

From: *Hobbit* (hobbitavian.org)
Date: Wed Sep 24 2003 - 07:55:19 CDT


You should filter for "src=..." because it isn't always "img src=", there
are plenty of other things that invoke "src=" too. And even with "img",
the "img" and the "src=" often get split across lines, but very rarely
so between the "src=" and its argument[s]. Since "src=" implies that
the HTML is trying to pull something in from somewhere else you likely
don't control, it's sufficient to trigger on. [Even those "cid:"
forward references to other message parts -- screw 'em]

Unfortunately so much mostly-legit mail contains web-bugs of various
sorts, that you're probably limited to IGNOREing the tags instead of
REJECTing. That will at least keep it out of recipients' HTML parsers.
It is evidently futile to complain to the idiot marketroids sending this
crap [such as your airline reservation confirmation email, and other
things you might want to see] to not send web-bugs, because they have
no clue they're even doing it and they usually send from an envelope
address that just bit-buckets on their side so they never see bounces.

Really borderline stuff; expect, ah, spirited policy discussion around
your own organization if you haven't already..

_H*