Re: [Exim] Generic VBS script detection

Página superior
Eliminar este mensaje
Responder a este mensaje
Autor: Vadim Vygonets
Fecha:  
A: Exim
Asunto: Re: [Exim] Generic VBS script detection
Quoth Nigel Metheringham on Fri, May 05, 2000:
>   (\"[^\"]+\.(?:vbs|vbe|wsh|js|jse)\"        # quoted filename.ext
>   |[\w.-]+\.(?:vbs|vbe|wsh|js|jse))        # unquoted filename.ext


I don't know why you need capturing parentheses there.

To be even more pedantic, when matching quoted filename, you need
to write:

\"[^\\\"]*(?:\\.[^\\\"]*)*\.(?:vbs|vbe|wsh|js|jse)\"

I think.

Vadik.

-- 
The Consultant's Curse:
    When the customer has beaten upon you long enough, give him
what he asks for, instead of what he needs.  This is very strong
medicine, and is normally only required once.