Hi all,

Last night I received a few messages with an html attachment.

Mime headers:

  MIME-Version: 1.0
  Content-Type: text/html; charset="iso-8859-1"
  Content-Transfer-Encoding: quoted-printable
  Content-Disposition: attachment; filename="ICICI Personal Banking.pdf.html"

The attachments don't contain html-, head- or body-tags; only
script- and /script-tags with a lot of javascript in between.

.html and .htm are not listed as "bad extensions" in the
"suggested-minimum-filter-for-windows-clients" script in the MIMEDefang
download. But obviously .html and .htm _ARE_ dangerous.


Regards,

Kees Theunissen.

-- 
Kees Theunissen,  System and network manager,   Tel: +31 (0)40-3334724
Dutch Institute For Fundamental Energy Research (DIFFER)
e-mail address:   [email protected]
postal address:   PO Box 6336, 5600 HH, Eindhoven, the Netherlands
visitors address: De Zaale 20, 5612 AJ, Eindhoven, the Netherlands

_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to