You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@spamassassin.apache.org on 2020/04/30 07:32:33 UTC

[Bug 7813] New: td.date tag parsed as uri

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7813

            Bug ID: 7813
           Summary: td.date tag parsed as uri
           Product: Spamassassin
           Version: SVN Trunk (Latest Devel Version)
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Libraries
          Assignee: dev@spamassassin.apache.org
          Reporter: giovanni@paclan.it
  Target Milestone: Undefined

Created attachment 5698
  --> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5698&action=edit
example email that trigger the bug

If an email contains a td.date tag, this tag is parsed as an uri and it could
create fp (in PDS_OTHER_BAD_TLD, for example).

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7813] td.date tag parsed as uri

Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7813

Henrik Krohns <ap...@hege.li> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |apache@hege.li

--- Comment #2 from Henrik Krohns <ap...@hege.li> ---
I don't understand, is this a real world example or imaginary? Your example
works like it's supposed to. There is no html content-type.

If such thing was a real problem, then it simply would be added to
uridnsbl_skip_domains etc, adding a random string exclusion to code is not a
solution in any way.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7813] td.date tag parsed as uri

Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7813

Giovanni Bechis <gi...@paclan.it> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |giovanni@paclan.it

--- Comment #1 from Giovanni Bechis <gi...@paclan.it> ---
Created attachment 5699
  --> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5699&action=edit
possible patch

A possible patch is attached but it could definitely be improved.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 7813] td.date tag parsed as uri

Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7813

Giovanni Bechis <gi...@paclan.it> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID

--- Comment #3 from Giovanni Bechis <gi...@paclan.it> ---
I have a real sample, it's base64 encoded so it's not easy to sanitize.
I will proceed by writing some rules.

-- 
You are receiving this mail because:
You are the assignee for the bug.