https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8063
Bug ID: 8063
Summary: uri not detected if two text/html parts exist
Product: Spamassassin
Version: 4.0.0
Hardware: PC
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: Libraries
Assignee: dev@spamassassin.apache.org
Reporter: wbre...@gmx.net
Target Milestone: Undefined
Created attachment 5844
--> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5844&action=edit
EML with two text/html parts
WARNING: example contains possibly dangerous .shtml attachment
The attached example EML contains a text/plain + text/html
multipart/alternative part and an text/html attachment with suspicious
javascript (which tries to download more JS).
URIs in the first text/html part are not parsed and checked (URIHOSTS and
URIDOMAINS stay empty).
As soon as I change the MIME type of the attachment to text/plain or remove the
attachment at all the URI in the first text/html part is detected.
To my surprise even after changing the attachment to text/plain URIs in the
first text/plain part are still detected. (I edited the EML accordingly)
--
You are receiving this mail because:
You are the assignee for the bug.
