[Mimedefang] New way of obfuscating text

[Renaud PASCAL]

Le mercredi 11 Février 2004 16:41, Brent J. Nordquist a écrit :
> On Tue, 10 Feb 2004, Michael Sims <michaels at crye-leike.com> wrote:
> > rawbody  SA_CUSTOM_TINY_FONT /font-size:\s*[01]\s*(?:p[xt])?\s*;/i
> > describe SA_CUSTOM_TINY_FONT HTML message contains unreadable font
> > size score    SA_CUSTOM_TINY_FONT 0.1
>
> For comparison, here's the one Bob Menschel posted to the SA list,
> with some improvements I made.  I would drop the ";" (see below for
> why):

OK, nice regexp too :)
 Though when testing it I find that on one of my sample
spam mails if finds only 4 occurences instead of 5 with the other regexp.
I agree that only one would be enough but ...

EXPRESSION REPEREE !
        Regexp: font-size:\s*[01]p[tx]\b
              : =09=09<td width=3D50 style=3D'border-bottom:2px solid black;font-size:1px'>&=

        Regexp: font-size:\s*[01]p[tx]\b
              : font-size:1px' bgcolor=3D'black'> </td>

        Regexp: font-size:\s*[01]p[tx]\b
              : <td width=3D9 bgcolor=3D'black' style=3D'font-size:1px'> </td>

        Regexp: font-size:\s*[01]p[tx]\b
              : =09=09=09=09=09=09=09  <td bgcolor=3D'black' style=3D'font-size:1px'> <=

EXPRESSION REPEREE !
        Regexp: font-size:\s*[01]\s*(?:p[xt])?\s*;
              :  =09=09<td style=3D"font-size:1px;border-left:1px solid black" width=3D9 hei=

        Regexp: font-size:\s*[01]\s*(?:p[xt])?\s*;
              :  =09=09<td style=3D"font-size:1px;" bgcolor=3Dblack width=3D761> </td>

        Regexp: font-size:\s*[01]\s*(?:p[xt])?\s*;
              :  =09=09<td style=3D"font-size:1px;" width=3D8> </td>

        Regexp: font-size:\s*[01]\s*(?:p[xt])?\s*;
              : =09=09<td colspan=3D2 style=3D"font-size:1px;border-left:1px solid black;bor=

        Regexp: font-size:\s*[01]\s*(?:p[xt])?\s*;
              : =09=09<td style=3D"font-size:1px;"> </td>