Re: [SAtalk] Could stripping bad HTML comments be abused by spammers?

2003-06-06 Thread Stuart Gall
> > Could this probably be abused by enclosing the complete Mail in "<"and ">" > Tags or something similar? So if the whole body ist one big invalid comment No Because then none of the text would be displayed so the vector is useless. > or tag, would the rest of the tests come up empty, because

Re: [SAtalk] Could stripping bad HTML comments be abused by spammers?

2003-06-04 Thread Alex van den Bogaerdt
On Mon, Jun 02, 2003 at 09:47:28PM -0700, Matthew Cline wrote: > I'm guessing that Outlook and similar must not show malformed comments, or > else the majority of spam recipients would see the comments stuck in the > middle of words, defeating the purpose of making them comments. MS does strang

Re: [SAtalk] Could stripping bad HTML comments be abused by spammers?

2003-06-03 Thread Matthew Cline
On Monday 02 June 2003 09:10 pm, Patrick Dreker wrote: > Could this probably be abused by enclosing the complete Mail in "<"and ">" > Tags or something similar? So if the whole body ist one big invalid comment > or tag, would the rest of the tests come up empty, because the message body > is emp

[SAtalk] Could stripping bad HTML comments be abused by spammers?

2003-06-03 Thread Patrick Dreker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello... After having read http://bugzilla.spamassassin.org/show_bug.cgi?id=1551 (stripping malformed HTML comments and possibly tags from the mail) I immediately had the following thought: Could this probably be abused by enclosing the complete Ma