On Sun, 26 Apr 2009, Theo Van Dinter wrote:
It's already been mentioned, but mimeheader is the right way to look at the headers of MIME parts.
Look more closely at my rule. It is checking for TWO headers, one after the other (separated by \n), identifying a gif with no name.
full /Content-Type: image\/gif;\n[^a-z]+name=""/
But yes, I will be keeping 'mimeheader' in mind for tests like the simple 'DS[LC]' png check. :) - Charles