https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6554

           Summary: HTML messages with <p style="color:#FFFFFF;" > fool
                    html_font_invisible()
           Product: Spamassassin
           Version: SVN Trunk (Latest Devel Version)
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Libraries
        AssignedTo: [email protected]
        ReportedBy: [email protected]


Created an attachment (id=4850)
 --> (https://issues.apache.org/SpamAssassin/attachment.cgi?id=4850)
Patch

I have a heavy flow of HTML messages that are getting through with BAYES_00
scores because of hidden paragraphs with what look like cut-n-pasted messages
from technical forums, which have non-spammy bayesian scores of course.

After analyzing the messages, they are using something like/similar to the
following:

   <p style="color:#FFFFFF; font-size:1px; line-height:1px;"> 

The HTML module was /not/ looking at style attributes on <p> tags and thus
missing the fact that the foreground font color is getting set to white, the
same as the background color.

The attached two-line patch against trunk version fixes this.

Save this as a file and look at in a browser to see the effect:

<html>
 <body>
  <p style="color: #FFFFFF;">
     You Can't See Me
  </p>
 </body>
</html>

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to