On Thu, 26 Jun 2014, Philip Prindeville wrote:

The [^\s] wouldn’t work because there is space in there…

<A href="#" philipp&nbsp;2014-06-25 
01:20:00;F1B9215E-B1D0-40BC-92D1-F13D501596B7;F1B9215E-B1D0-40BC-92D1-F13D501596B7;F1B9215E-B1D0-40BC-92D1-F13D501596B7;F1B9215E-B1D0-40BC-92D1-F13D501596B7;F1B9215E-B1D0-40BC-92D1-F13D501596B7;F1B9215E-B1D0-40BC-92D1-F13D501596B7><SPAN
 style="VISIBILITY: hidden"></SPAN></A>

note the name, non-breaking space, and the timestamp before the UUID’s…

The nonbreaking space wouldn't have any effect, that's not converted before the RE scan; but the space in the date I did miss - apologies.

  rawbody L_REPEATING_UUIDS  /<a href="\#" [^>]+(;[A-F0-9].....

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Maxim IX: Never turn your back on an enemy.
-----------------------------------------------------------------------
 8 days until the 238th anniversary of the Declaration of Independence

Reply via email to