I do see some FPs, but not many this combined with one or two rules from the
sandbox seem to be doing okay
meta BODY_URI_ONLY_WP ((BODY_URI_ONLY || BODY_SINGLE_URI) && LOC_WP)
On 05/09/14 18:06, John Hardin wrote:
On Fri, 5 Sep 2014, Paul Stead wrote:
What would the thoughts on something like the following be?
uri LOC_WP
m{/((wp-content/plugins|wp-content/themes|wp-includes|modules/mod_wdbanners|includes/|google_recommends|mt-static|data/module).{0,64}(?!gif|jpg|png|bmp).{3})$}
This seems to match on the example posted, uses a negative match to not match
common image file types
I've added it to my sandbox with minor tweaks to give masscheck a chance to
evaluate it. Unfortunately if it does FP very much I can't provide examples of
what it FPs on for any message that's not in my corpora...
--
Paul Stead
Systems Engineer
Zen Internet
