[ ijbswa-Actionsfile feedback-3430235 ] pages blocked due to three letter strings

Actionsfile feedback item #3430235, was opened at 2011-10-29 17:49
Message generated for change (Comment added) made by mat75man
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=460288&aid=3430235&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Pending
Resolution: None
Priority: 5
Private: No
Submitted By: dan stahlke (dstahlke)
Assigned to: Fabian Keil (fabiankeil)
Summary: pages blocked due to three letter strings

Initial Comment:
The following pattern is perhaps a bit too loose since it can block based on three letter strings "ads" and "adv":
/(.*/)?ad(\?|/|s|v|_?(image|se?rv|box)|cycle|rotate|mentor|click|f[ra]m|script|stream|fetch|log|space)

For example, it blocks
http://www.scottaaronson.com/talks/advucsb.ppt
along with a few other false positives that I have seen so far.

Perhaps it would be better to require a word boundary after "ads".  I can't think of what "adv" is supposed to match, except for "advert" which could be spelled out explicitly.

----------------------------------------------------------------------

Comment By: Mathew Murphy (mat75man)
Date: 2011-11-24 22:07

Message:
I changed mine for the same reason, not sure if it is a good thing but it
works.
/(.*/)?ads(\?|/|1|erver|pop|wrap|cycle|rotate|mentor|click|f[ra]m|script|stream|fetch|log|space)

----------------------------------------------------------------------

Comment By: David (cellwall)
Date: 2011-11-15 09:06

Message:
I agree.  I just found another false positive:

www.worldnomads.com


----------------------------------------------------------------------

Comment By: Fabian Keil (fabiankeil)
Date: 2011-11-10 15:03

Message:
Thanks for the report. I'll look into this after the next release.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=460288&aid=3430235&group_id=11118

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d