Re: [Exim] Generic VBS script detection

Etusivu
Poista viesti
Vastaa
Lähettäjä: Jeffrey Goldberg
Päiväys:  
Vastaanottaja: Vadim Vygonets
Kopio: Exim
Uudet otsikot: Re: [Exim] Generic VBS script detection - filter attached
Aihe: Re: [Exim] Generic VBS script detection
On Fri, 5 May 2000, Vadim Vygonets wrote:

> To be even more pedantic, when matching quoted filename, you need
> to write:
>
> \"[^\\\"]*(?:\\.[^\\\"]*)*\.(?:vbs|vbe|wsh|js|jse)\"
>
> I think.


Possibly, but it is ok to not care. If my regex is too broad and
matches

name="foo.txt.nasty

is that really such a problem? We are not trying to write a full MIME
parser in perl, just get something that won't have too many false
positives and false negatives. Unlikely false positives should not be
considered a problem.

-j


-- 
Jeffrey Goldberg                +44 (0)1234 750 111 x 2826
 Cranfield Computer Centre      FAX         751 814
 J.Goldberg@???     http://WWW.Cranfield.ac.uk/public/cc/cc047/
Relativism is the triumph of authority over truth, convention over justice.