bug in content-disposition parsing
"Todd Richmond" <[email protected]> Tue, 27 Jul 2004 13:13:37 -0700
| Newsgroups | gmane.comp.lang.perl.modules.mail-box |
|---|---|
| Message-ID | <005f01c47416$344a17b0$2002140a@gt3> |
There is bug when Mail::Box attempts to parse Content-Disposition attributes
when vales are not quoted. Calling
$part->body->disposition->attribute('filename') on a message part with the
header:
Content-Disposition: attachment; filename=Cat.scr; modification-date="Mon,
19 Jul 2004 16:45:17 -0500"
returns "Cat.scr;" with an extra ';' attached. If the space after the ; is
removed, the file becomes "Cat.scr;modification-date=Mon,"
We are seeing numerous messages formated this way which get through filters
that look for executeable extensions
Todd