Rybski Dajo wrote:
> Well, I did that. The regex that crashes my ASSP is the one from the
> wiki for "side effect" (one line):
> \b[S$5]+\s?\S?\s?\W?[I1!|lt\xEC-\xEF]+\s?\S?\s?\W?D+\s?\S?\s?\W?[E3\xE8-
> \xEB]+(\s?\S?\s?\W?)+\s?\S?\s?\W?[E3\xE8-\xEB]+\s?\S?\s?\W?F+\s?\S?\s?\W
> ?F+\s?\S?\s?\W?[E3\xE8-\xEB]+\s?\S?\s?\W?C+\s?\S?\s?\W?T# SIDE EFFECT

An excellent discovery!  I was not able to come to a similar conclusion 
in my testing, but I had my suspicions since it is the only regex in 
that section that catches a two words phrase.  I always wondered if that 
was a bad idea...

Also - In my own testing, I found that the HOODIA match could also catch 
the phrase "how old is", but this should be considered safe when 
considering whitelisted emails against non-whitelisted e-mails.

I have updated the page accordingly - with the 'SIDE EFFECT' line 
removed, and the 'UNIVERSITY [...] DEGREE' line with an updated description.

http://www.asspsmtp.org/wiki/BombRe_and_ScriptRe

Rybski, thank you for following through with your testing. I'm sure that 
there are many of us here that appreciate the effort so that we can use 
those REs again!


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to