On Mon, 2004-11-08 at 15:29, John Hardin wrote:

>  <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
>  <html><head>
>   <DEFANGED_meta http-equiv="content-type"
>   content="text/html; charset=windows-1251">
>  </head>
>  <body text="#000000" bgcolor="#ffffcc" link="#000099"
>   vlink="#990099"
>   alink="#000099">
> 
> Note the misquoted meta tag options.
> 
> Pine *did* complain about non-hex QP strings in the message, though.

*penny drops* that's because of the QP encoding of the body and the
NON-QP-compliant option="whatever" tags in the HTML...

Possible rule?

describe BAD_QP Possibly malformed Quoted Printable body text
rawbody  BAD_QP
/Content-Transfer-Encoding:\s+quoted-printable.*=[^0-9a-f]/i
score    BAD_QP 0.5


--
John Hardin
Internal Systems Administrator (Seattle)
CRS Retail Systems, Inc.
3400 188th Street SW, Suite 185
Lynnwood, WA 98037
voice: (425) 672-1304
  fax: (425) 672-0192
email: [EMAIL PROTECTED]
  web: http://www.crsretail.com
-----------------------------------------------------------------------
 If you smash a computer to bits with a mallet, that appears to count
 as encryption in the state of Nevada.
                                               - CRYPTO-GRAM 12/2001
-----------------------------------------------------------------------

Reply via email to