|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: header_check: regexp or PCRE? false positives?
From: Roger B.A. Klorese (rogerk
queernet.org)
Date: Mon Jan 03 2005 - 14:52:48 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Matt wrote:
> Someone can name a file something like image.com.jpg, or they can use
>something else between the extensions, say for example,
>image.com?=?jpg, and what it gets picked up as depends to some degree upon
>the MUA. The above example is not exact. (Just saying before someone else
>does :).
>
>
> The expression below may be closer to what you want.
>
>.*\.com([[:punct:]].*)?$
>
>
>
The problem I've seen is that foo.jpg.com is presented as foo.jpg when
"hide suffixes" is set. Since the anchored epxression would pick that
up, that's cool. On the other hand, even if foo.com.jpg is sent and is
an executable, the suffix would cause the attachment to be extracted and
typed as a jpeg -- it's just that the name would display as foo.com. I
don't see the problem with that, and I've never observed and dangerous
behavior to the contrary.
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]