Re: Rules for invisible div and 0pt font?

Just going from http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/gbechis/20_html.cf?revision=1861560

Re: Mail to local users

On 17 Jun 2019, at 11:32, @lbutlr wrote: > The message WAS sent via an authenticated connection: > > Jun 16 15:26:32 mail postfix/submit/smtpd[52711]: 45RnTh0J8KzdrvJ: > client=c-73-14-161-160.hsd1.co.comcast.net[73.14.161.160], sasl_method=PLAIN, > sasl_username=kr...@kreme.com > Jun 16

Re: Rules for invisible div and 0pt font?

On Tue, 18 Jun 2019, Paul Stead wrote: On Tue, 18 Jun 2019 at 19:14, John Hardin wrote: On Tue, 18 Jun 2019, Giovanni Bechis wrote: On 6/17/19 9:14 PM, Amir Caspi wrote: There is a div here with display:none, as well as font-size:0px. The spample hits HTML_FONT_LOW_CONTRAST but does not

Re: Rules for invisible div and 0pt font?

On Tue, 18 Jun 2019 at 20:23, Paul Stead wrote: > Also rename from T_ otherwise it will be skipped. If you drop the T_ and > omit the publish it will let QA decide if performance is good enough :) > Although not looking so good today - https://ruleqa.spamassassin.org/20190618-r

Re: Rules for invisible div and 0pt font?

On Tue, 18 Jun 2019 at 19:14, John Hardin wrote: > On Tue, 18 Jun 2019, Giovanni Bechis wrote: > > > On 6/17/19 9:14 PM, Amir Caspi wrote: > >> There is a div here with display:none, as well as font-size:0px. The > spample hits HTML_FONT_LOW_CONTRAST but does not appear to hit any rule >

Re: Rules for invisible div and 0pt font?

On Tue, 18 Jun 2019, Giovanni Bechis wrote: On 6/17/19 9:14 PM, Amir Caspi wrote: There is a div here with display:none, as well as font-size:0px. The spample hits HTML_FONT_LOW_CONTRAST but does not appear to hit any rule relating to a hidden div or tiny font. There is T_HIDDEN_WORD on

Re: Rules for invisible div and 0pt font?

On Jun 18, 2019, at 10:55 AM, Bill Cole wrote: > > Looking at the 2 most recent (a USPS "Informed Delivery Daily Digest" message > and Office Depot order followup) I see display:none only in inline style > attributes of block elements. e.g.: Looks like the first one is a web bug. The

Re: Rules for invisible div and 0pt font?

On 18 Jun 2019, at 10:52, Amir Caspi wrote: Are the matches all within @media blocks like lbutlr suggested or do they occur inline within div/span/etc as well? Looking at the 2 most recent (a USPS "Informed Delivery Daily Digest" message and Office Depot order followup) I see display:none

Re: Rules for invisible div and 0pt font?

Are the matches all within @media blocks like lbutlr suggested or do they occur inline within div/span/etc as well? Thanks! --- Amir thumbed via iPhone > On Jun 18, 2019, at 8:42 AM, Bill Cole > wrote: > >> On 17 Jun 2019, at 15:25, @lbutlr wrote: >> >>> On Jun 17, 2019, at 1:14 PM, Amir

Re: Rules for invisible div and 0pt font?

On 17 Jun 2019, at 15:25, @lbutlr wrote: On Jun 17, 2019, at 1:14 PM, Amir Caspi wrote: rawbody AC_HIDDEN_ELEMENT /display\s*:\s*none\s*;/ Since display:none is a pretty common method for showing and hiding elements depending on things like screen size, I would guess this is going

Re: Mail to local users

On 17 Jun 2019, at 02:07, Matus UHLAR - fantomas wrote: But how do I tell spamass-milter not to check for PBL and other similar tests on mails from local users to local users? don't. This is exactly what spammers try for years to avoid being detected. On 17.06.19 08:30, @lbutlr wrote:

Re: Rules for invisible div and 0pt font?

On 2019-06-17 21:26, Amir Caspi wrote:> On Jun 17, 2019, at 1:14 PM, Amir Caspi > wrote: >> >> rawbodyAC_HIDDEN_FONT/font-size\s*:\s*0\s*(?:em|pt|px|%)\s*;/ >> > > Actually, based on another spample (https://pastebin.com/rrU2AsVT), > let's modify this one -- the

Re: Rules for invisible div and 0pt font?

On 6/17/19 9:14 PM, Amir Caspi wrote: > Hi all, > > In reviewing today's FNs I came across the following spample: > https://pastebin.com/9QQVwUY6 > > There is a div here with display:none, as well as font-size:0px. The spample > hits HTML_FONT_LOW_CONTRAST but does not appear to hit any rule