You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jm...@apache.org on 2005/02/08 03:14:29 UTC

svn commit: r151819 - spamassassin/trunk/rules/70_testing.cf

Author: jm
Date: Mon Feb  7 18:14:26 2005
New Revision: 151819

URL: http://svn.apache.org/viewcvs?view=rev&rev=151819
Log:
add test rule for the http://www.shmoo.com/idn/homograph.txt attack

Modified:
    spamassassin/trunk/rules/70_testing.cf

Modified: spamassassin/trunk/rules/70_testing.cf
URL: http://svn.apache.org/viewcvs/spamassassin/trunk/rules/70_testing.cf?view=diff&r1=151818&r2=151819
==============================================================================
--- spamassassin/trunk/rules/70_testing.cf (original)
+++ spamassassin/trunk/rules/70_testing.cf Mon Feb  7 18:14:26 2005
@@ -306,3 +306,7 @@
 
 body T_HTML_CLOSED_TWICE	eval:html_eval('closed_html', '> 1')
 body T_BODY_CLOSED_TWICE	eval:html_eval('closed_body', '> 1')
+
+# possible IDN spoofing attack: http://www.shmoo.com/idn/homograph.txt
+uri T_HIGH_CODEPAGE_URI         /^https?:\/\/[^\/]*\&\#(?:\d{4,}|[3456789]\d\d);/i
+