--- On Fri, 10/15/10, Kevin A. McGrail <[email protected]> wrote:
> ...
> Something like $subject =~ s/[^-a-z0-9 _]//i; would be a good start.

A start it is.  One should allow for punctuation at the end, as such is proper 
writing style.  Also, certain punctuation marks (e.g. comma, slash, or colon - 
the latter especially in "Re:") also occur in the middle of subjects.

What one should disallow is exactly two periods in a row.  One, three, or more 
than three won't have the effect of climbing a filesystem's directory tree.

Watch out for tricky mime-encoded subjects too.
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to