Adam Stephens wrote:
LuKreme wrote:
On 12-May-2009, at 18:27, John Hardin wrote:
uri      URI_HIDDEN    /\/\../


Ah, that's very very nice.

Scoring it at 3.0, too aggressive?


I'd say so - I'm seeing lots of FPs on this, most prominently on mail from mail.elsevier-alerts.com



I believe if the rule is strict enough such that it doesn't FP, then a score of 3 is not inappropriate. The problem with the rule as it stands above is that it appears to be hitting on something other than /. in a URI

I saw a FP on this today also that I don't quite understand. I searched the text of the email and no matches against the string "\." were found (most likely as the encoding was quoted-printable) and manually checking the URIs didn't help much either. I'm not sure what's causing it to FP.

In the meantime I' going to revert to something closer to my original implementation which doesn't FP on the examples I have:

uri     URI_HIDDEN      /\w/\.\w/


Reply via email to