Studying options for "or more", I've found this example from 20_drugs.cf:

body DRUGS_SMEAR1 /(?:Viagra|Valium|Xanax|Soma|Cialis){2}/i
describe DRUGS_SMEAR1 Two or more drugs crammed together into one word


But doesn't 2 or more need a coma, as in?:

body DRUGS_SMEAR1 /(?:Viagra|Valium|Xanax|Soma|Cialis){2,}/i


I ask because I'm trying to get this to work, but it stops when {4,} is added:

rawbody OBSFU_HTML /(>\s?[A-Z]\s?<){4,}/i


So as to catch multiple examples of:

> a<
>b<
>c <
> d<
>e<
>f <


Thanks,
Dan

Reply via email to