> <HTML><HEAD></HEAD><BODY> > iframe src=cid:A6ed42Wd7M65W7171 height=0 width=0> > /iframe> > <FONT></FONT></BODY></HTML> > > (initial <'s removed just in case someone's email client tries to execute this)
Although you didn't remove them from the subject line, which has caused a problem with the web based e-mail archive on sourceforge. It seems you can place any arbitrary html code in the subject line and it doesn't get cleaned, yet another cross-site scripting bug. This should be submitted to sourceforge. I agree that IFrames are used in nothing but spam or viruses, at least in my experience. Also, I recently submitted a sighting to the sightings list which I was quite surprised got let through. 'Stick your tongue in my ass', 'big breasted teens' etc, all in HTML and huge font. Is there a way to check the font size of a HTML message? Also, there seems to be a lot of pornographic phrases that aren't being caught. I'd also like to see a bit of weighting being placed on any images in an e-mail message, only a small amount because its obviously used legitimetly a lot of times, but enough to tip the scales if it has a few other 'hits'. -Shane. _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk