You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spamassassin.apache.org by jh...@apache.org on 2010/03/11 15:33:53 UTC
svn commit: r921871 -
/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Author: jhardin
Date: Thu Mar 11 14:33:53 2010
New Revision: 921871
URL: http://svn.apache.org/viewvc?rev=921871&view=rev
Log:
Reduce FPs on URI_HIDDEN /../
Modified:
spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
URL: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf?rev=921871&r1=921870&r2=921871&view=diff
==============================================================================
--- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf (original)
+++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Thu Mar 11 14:33:53 2010
@@ -326,5 +326,7 @@ tflags HTML_ELEM_OBFU_150
header PPMC_FROM_1 From =~ /\bPayPa[IL](?:\.Com)?\b/
describe PPMC_FROM_1 Paypal phishing sign
+uri URI_HIDDEN_2 m;.{8}(?:[/\\]|%(?i:5c|2f))(?!\.\.?[/%\\])\..;
+describe URI_HIDDEN_2 URI contains a hidden file or directory