On Monday 02 June 2003 09:10 pm, Patrick Dreker wrote:  

> Could this probably be abused by enclosing the complete Mail in "<"and ">"
> Tags or something similar? So if the whole body ist one big invalid comment
> or tag, would the rest of the tests come up empty, because the message body
> is empty after stripping? And closely related: Would Outlook and Co.
> display this kind of message correctly (If the body is marked as HTML? If
> the body is marked as plain text?)

I'm guessing that Outlook and similar must not show malformed comments, or 
else the majority of spam recipients would see the comments stuck in the 
middle of words, defeating the purpose of making them comments.

Hmmm...  Howevere, I think that a "<!" could be put at the beginning with the 
"<!" encoded as an HTML character entity (&lt;), which would be decoded to a 
"<" before the stripping code was invoked, thus fooling it...

Gah, maybe HTML::Parser *does* need to be fixed, rather than putting a hack 
into SA.

-- 
Give a man a match, and he'll be warm for a minute, but set him on
fire, and he'll be warm for the rest of his life.

Advanced SPAM filtering software: http://spamassassin.org



-------------------------------------------------------
This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to