You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2011/02/20 18:59:16 UTC
svn commit: r1072660 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf
Author: jhardin
Date: Sun Feb 20 17:59:16 2011
New Revision: 1072660
URL: http://svn.apache.org/viewvc?rev=1072660&view=rev
Log:
Add coverage for obfuscated https:// protocol
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf?rev=1072660&r1=1072659&r2=1072660&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_uri_obfu_ws.cf Sun Feb 20 17:59:16 2011
@@ -17,7 +17,7 @@ replace_rules URI_OBFU_WWW
endif
# First started appearing 02/2011
-body URI_OBFU_PROTO m,h\st\st\sp\s?:\s?/\s?/,i
+body URI_OBFU_PROTO m,h\st\st\sp(?:\ss)\s?:\s?/\s?/,i
describe URI_OBFU_PROTO URI http protocol with space obfuscation
body URI_OBFU_TLD /\.\s(?:c\so\sm|n\se\st|o\sr\sg|b\si\sz|i\sn\sf\so)/i