[Bug 8063] New: uri not detected if two text/html parts exist

[bu...@spamassassin.apache.org]

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8063

            Bug ID: 8063
           Summary: uri not detected if two text/html parts exist
           Product: Spamassassin
           Version: 4.0.0
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Libraries
          Assignee: dev@spamassassin.apache.org
          Reporter: wbreyha@gmx.net
  Target Milestone: Undefined

Created attachment 5844
  --> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5844&action=edit
EML with two text/html parts

WARNING: example contains possibly dangerous .shtml attachment

The attached example EML contains a text/plain + text/html
multipart/alternative part and an text/html attachment with suspicious
javascript (which tries to download more JS).

URIs in the first text/html part are not parsed and checked (URIHOSTS and
URIDOMAINS stay empty).

As soon as I change the MIME type of the attachment to text/plain or remove the
attachment at all the URI in the first text/html part is detected.

To my surprise even after changing the attachment to text/plain URIs in the
first text/plain part are still detected. (I edited the EML accordingly)

-- 
You are receiving this mail because:
You are the assignee for the bug.