2. the check isn't thorough enough because it doesn't consider other content-types whereby people hide executable attachments.
Suggestion: you know the line in the plugin that is only checking the two content types. You know the other content types you want to check.
Change the line in the plugin source, restart SA, and be done with it.If you want to avoid having to do the same thing in a future release, you can also submit a bug report in Bugzilla.
Loren
