Re: [Exim] Generic VBS script detection

Top Page
Delete this message
Reply to this message
Author: Vadim Vygonets
Date:  
To: Exim
Subject: Re: [Exim] Generic VBS script detection
Quoth Nigel Metheringham on Fri, May 05, 2000:
>   (\"[^\"]+\.(?:vbs|vbe|wsh|js|jse)\"        # quoted filename.ext
>   |[\w.-]+\.(?:vbs|vbe|wsh|js|jse))        # unquoted filename.ext


I don't know why you need capturing parentheses there.

To be even more pedantic, when matching quoted filename, you need
to write:

\"[^\\\"]*(?:\\.[^\\\"]*)*\.(?:vbs|vbe|wsh|js|jse)\"

I think.

Vadik.

-- 
The Consultant's Curse:
    When the customer has beaten upon you long enough, give him
what he asks for, instead of what he needs.  This is very strong
medicine, and is normally only required once.