FPs with UPPERCASE_URI

["Lichtinger, Bernhard" <Be...@lrz.de>]

Hi,

Since UPPERCASE_URI has a score of 4.2 we get sometimes false positives (spamassassin-4.0.1).

For example a HTML newsletter with relative links can trigger UPPERCASE_URI if the ankor name has mixed letters followed by a semicolon:

HTML in the body:

<a href="#_BMFTR:_Innovative_Data">...</a>
...
<a name="_BMFTR:_Innovative_Data"></a>


Leads to:
dbg: uri: canonicalizing html uri: #_BMFTR:_Innovative_Data
dbg: uri: cleaned uri: #_BMFTR:_Innovative_Data
dbg: rules: ran uri rule UPPERCASE_URI ======> got hit: "#_BMFTR:"


I am wondering if relative links like href="#_BMFTR:_Innovative_Data" should be better ignored by the uri module? 



Kind regards,
Bernhard

Re: FPs with UPPERCASE_URI

[Bill Cole <sa...@billmail.scconsult.com>]

On 2026-07-10 at 10:59:50 UTC-0400 (Fri, 10 Jul 2026 07:59:50 -0700 
(PDT))
John Hardin <us...@spamassassin.apache.org>
is rumored to have said:

> I cannot guarantee how quickly the fix will be published

Publishing resumed yesterday.

I also have had 4 days of the DDoS countermeasures mostly working. Not 
sure how resilient that will be.

-- 
  Bill Cole
  bill@scconsult.com or billcole@apache.org
  (AKA @grumpybozo@toad.social and many *@billmail.scconsult.com 
addresses)
  Please keep discussion mailing list replies *on-list*
  Not Currently Available For Hire

Re: FPs with UPPERCASE_URI

[John Hardin <jh...@impsec.org>]

On Thu, 9 Jul 2026, Lichtinger, Bernhard wrote:

> Hi,
>
> Since UPPERCASE_URI has a score of 4.2 we get sometimes false positives (spamassassin-4.0.1).
>
> For example a HTML newsletter with relative links can trigger UPPERCASE_URI if the ankor name has mixed letters followed by a semicolon:
>
> HTML in the body:
>
> <a href="#_BMFTR:_Innovative_Data">...</a>
> ...
> <a name="_BMFTR:_Innovative_Data"></a>
>
>
> Leads to:
> dbg: uri: canonicalizing html uri: #_BMFTR:_Innovative_Data
> dbg: uri: cleaned uri: #_BMFTR:_Innovative_Data
> dbg: rules: ran uri rule UPPERCASE_URI ======> got hit: "#_BMFTR:"

The rule is intended to match the protocol and it isn't strict enough 
about format matching.

Fixing, and setting a score limit, but masscheck is spam-starved at the 
moment and I cannot guarantee how quickly the fix will be published.


-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org                         pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   If the rock of doom requires a gentle nudge away from Gaia to
   prevent a very bad day for Earthlings, NASA won’t be riding to the
   rescue. These days, NASA does dodgy weather research and outreach
   programs, not stuff in actual space with rockets piloted by
   flinty-eyed men called Buzz.                       -- Daily Bayonet
-----------------------------------------------------------------------
  10 days until the 57th anniversary of Apollo 11 landing on the Moon