Re: [Exim] Generic VBS script detection

Páxina inicial
Borrar esta mensaxe
Responder a esta mensaxe
Autor: Jeffrey Goldberg
Data:  
Para: Vadim Vygonets
CC: Exim
Temas novos: Re: [Exim] Generic VBS script detection - filter attached
Asunto: Re: [Exim] Generic VBS script detection
On Fri, 5 May 2000, Vadim Vygonets wrote:

> To be even more pedantic, when matching quoted filename, you need
> to write:
>
> \"[^\\\"]*(?:\\.[^\\\"]*)*\.(?:vbs|vbe|wsh|js|jse)\"
>
> I think.


Possibly, but it is ok to not care. If my regex is too broad and
matches

name="foo.txt.nasty

is that really such a problem? We are not trying to write a full MIME
parser in perl, just get something that won't have too many false
positives and false negatives. Unlikely false positives should not be
considered a problem.

-j


-- 
Jeffrey Goldberg                +44 (0)1234 750 111 x 2826
 Cranfield Computer Centre      FAX         751 814
 J.Goldberg@???     http://WWW.Cranfield.ac.uk/public/cc/cc047/
Relativism is the triumph of authority over truth, convention over justice.