http://bugzilla.spamassassin.org/show_bug.cgi?id=4411





------- Additional Comments From [EMAIL PROTECTED]  2005-06-20 12:51 -------
Subject: Re:   New: $permsgstatus->get_uri_list too aggressive?

On Mon, Jun 20, 2005 at 12:43:28PM -0700, [EMAIL PROTECTED] wrote:
> that a URI of http://username:[EMAIL PROTECTED]:nn/ will get parsed and
> 
>   mailto:username:[EMAIL PROTECTED]
>   http://username:[EMAIL PROTECTED]:nn/
>   http://www.example.com:nn/
> 
> The mailto and the last http URIs should not be returned since they are not
> accurate representations of the input URI.

The last one is.  It's the actual URI without the login information, which is
exactly what we want.  The mailto is incorrect.

> I can kind of see why you'd want to return something like the last URI for 
> your
> reduced view mechanism, but such a view would theoretically be provided 
> without
> the port number, so I'm not sure if that's the intention or not.

The idea is to remove the "obfuscation" of URIs so the rules don't have to
account for everything like username and passwords.  We do want to catch port
numbers.

> If you need/want to keep all of these in the outputs, can we get a separate
> array or parameter that just returns the normalized URIs?

This is possible in 3.1: don't call get_uri_list, call get_uri_detail_list
which you can see the raw URIs as well as the "canonified" version
separately.





------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to