On Wed, 2014-05-28 at 22:05 -0400, Alex wrote:
> This is the quoted-printable text/html content:
>
> <HTML><HEAD></HEAD>
> <BODY dir=3Dltr>
> <DIV dir=3Dltr>
> <DIV style=3D"FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR:
> #000000">
> <DIV>Hi! <A =
> href=3D"http://example.ru/rnj/trouble.php";>http://example.ru/rnj/trouble.php</A></DIV></DIV></DIV></BODY></HTML>
>
> where example.ru is the real domain (which is now a dead link anyway).
> The rendered version would be so much easier to parse, but can that be
> done separately, and will there always be a text component?
The rendered version is available as a body rule. If the actual message
contains both, a text/plain and a text/html MIME-part, the body also
includes both.
If by "separately" you mean have a rule match only one of these text/*
parts, the answer is no -- with SA stock rule types and plugins, that
is.
What you're referring to as "text component" in that context is beyond
me, though.
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
