On 15-May-2009, at 14:35, LuKreme wrote:
On 15-May-2009, at 12:46, Adam Katz wrote:
uri URI_HIDDEN /.{7}\/\../
That won't catch http://www.spammer.example.com/.../hidden-
malware.asf, it will only catch the relative url form "../path/to/
content" which SA improperly prefaces with "http://"
uri URI_HIDDEN /.{8}\/\../
Some tests:
http://example.com/.hidden/directory/
scores:
* 3.0 URI_HIDDEN URI: Contains a link with a hidden directory
href="../not/a/hidden/directory"
does not match
--
<[TN]FBMachine> i got kicked out of Barnes and Noble once for
moving all the bibles into the fiction section