>SInce the article says 1) html5 will fix the ambiguity of rendering, 2) 
Firefox and Safari are rapidly becoming HTML5 fully compliant and since 2) 
it >says that ­ is only used in MSWord docs, wouldn't it be better to 
not change rendering behavior of ASSP which is correct and just filter on 
­?

If someone uses ­ in a html mail 

1. you (as human) will see an '-' in the text - so if you create a regex 
to detect the part with the '-' , you'll use the '-' in the regex not &shy 
nor \177 nor \xAD;
2. assp encodes all HTML-entitys - so &shy will result in \177 or hex(AD) 
- which will never match a '-' - so before assp will do the default 
encoding it will encode the ­ to the ascii '-'

Thomas




Von:    TR Shaw <ts...@oitc.com>
An:     ASSP development mailing list <assp-test@lists.sourceforge.net>
Datum:  08.10.2010 15:14
Betreff:        Re: [Assp-test] Antwort:  Malicious URL's - soft hyphen




SInce the article says 1) html5 will fix the ambiguity of rendering, 2) 
Firefox and Safari are rapidly becoming HTML5 fully compliant and since 2) 
it says that &shy; is only used in MSWord docs, wouldn't it be better to 
not change rendering behavior of ASSP which is correct and just filter on 
&shy;?

Tom

On Oct 8, 2010, at 1:17 AM, Thomas Eckardt wrote:

> Thank Ken,
> 
> version 2.0.2_1.2.24 will regard this - decoding '&shy;' not to the 
> default soft hyphen - instead to the realy ascii '-'.
> 
> Thomas
> 
> 
> 
> 
> Von:    K Post <nntp.p...@gmail.com>
> An:     ASSP development mailing list <assp-test@lists.sourceforge.net>
> Datum:  08.10.2010 00:24
> Betreff:        [Assp-test] Malicious URL's - soft hyphen
> 
> 
> 
> 
> Interesting article:
> 
> Spammers Using SHY Character to Hide Malicious URLs
> 
http://threatpost.com/en_us/blogs/spammers-using-shy-character-hide-malicious-urls-100710

> 
> 
------------------------------------------------------------------------------
> Beautiful is writing same markup. Internet Explorer 9 supports
> standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
> Spend less time writing and  rewriting code and more time creating great
> experiences on the web. Be a part of the beta today.
> http://p.sf.net/sfu/beautyoftheweb
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test
> 
> 
> 
> 
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential, 
legally 
> privileged and protected in law and are intended solely for the use of 
the 
> 
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no 
> known virus in this email!
> *******************************************************
> 
> 
> 
------------------------------------------------------------------------------
> Beautiful is writing same markup. Internet Explorer 9 supports
> standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
> Spend less time writing and  rewriting code and more time creating great
> experiences on the web. Be a part of the beta today.
> 
http://p.sf.net/sfu/beautyoftheweb_______________________________________________

> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test


------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
Spend less time writing and  rewriting code and more time creating great
experiences on the web. Be a part of the beta today.
http://p.sf.net/sfu/beautyoftheweb
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test




DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
Spend less time writing and  rewriting code and more time creating great
experiences on the web. Be a part of the beta today.
http://p.sf.net/sfu/beautyoftheweb
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to