John Hardin wrote:

ITYM it fools recipes that expect the tag to all be on a single line,
which is my point. I don't think SA is actually parsing the HTML (beyond
the uri stuff).


That's a pity, using a standard HTML parsing module from CPAN would offload the work involving handling of maliciously malformed HTML syntax to that external module and its maintainer.

This would provide a much more similar behaviour to MUA's like Outlook, Mozilla Mail or KMail WRT HTML interpretation, which is a good thing. The chance would be bigger that if the user sees something in a certain way, then SpamAssassin engine sees too.

Anyway, I've published samples of that malicouis spam here:
<http://olo.ab.altkom.pl/domowa/spam/samples/low_contrast/>

You can check for yourself how these are handled by your installation of SA.

--
Best Regards,
Aleksander Adamowski
GG#: 274614
ICQ UIN: 19780575 http://olo.ab.altkom.pl




Reply via email to