> <HTML><HEAD></HEAD><BODY>
>  iframe src=cid:A6ed42Wd7M65W7171 height=0 width=0>
>  /iframe>
> <FONT></FONT></BODY></HTML>
>
> (initial <'s removed just in case someone's email client tries to execute
this)

Although you didn't remove them from the subject line, which has caused a
problem with the web based e-mail archive on sourceforge. It seems you can
place any arbitrary html code in the subject line and it doesn't get
cleaned, yet another cross-site scripting bug. This should be submitted to
sourceforge.

I agree that IFrames are used in nothing but spam or viruses, at least in my
experience. Also, I recently submitted a sighting to the sightings list
which I was quite surprised got let through. 'Stick your tongue in my ass',
'big breasted teens' etc, all in HTML and huge font. Is there a way to check
the font size of a HTML message? Also, there seems to be a lot of
pornographic phrases that aren't being caught. I'd also like to see a bit of
weighting being placed on any images in an e-mail message, only a small
amount because its obviously used legitimetly a lot of times, but enough to
tip the scales if it has a few other 'hits'.

-Shane.


_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to