commit ea0584a: [Minor] Lua_content: Make regexp more strict

Vsevolod Stakhov vsevolod at highsecure.ru
Thu Nov 28 17:21:09 UTC 2019


Author: Vsevolod Stakhov
Date: 2019-11-28 17:21:09 +0000
URL: https://github.com/rspamd/rspamd/commit/ea0584a431a49eb3fc682ccb3b8d6fc80a99db37 (HEAD -> master)

[Minor] Lua_content: Make regexp more strict

---
 lualib/lua_content/pdf.lua | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lualib/lua_content/pdf.lua b/lualib/lua_content/pdf.lua
index a531396db..6676d6d36 100644
--- a/lualib/lua_content/pdf.lua
+++ b/lualib/lua_content/pdf.lua
@@ -46,7 +46,7 @@ local pdf_patterns = {
     patterns = {
       [[netsh\s]],
       [[echo\s]],
-      [[/[A-Za-z]*#\d\d]], -- Hex encode obfuscation
+      [[/[A-Za-z]*#\d\d(?:[#A-Za-z<>/\s])]], -- Hex encode obfuscation
     }
   }
 }


More information about the Commits mailing list