svn commit: r1934648 - spamassassin/trunk/rulesrc/sandbox/fkento
[email protected] Tue, 26 May 2026 17:48:44 -0000
| Newsgroups | gmane.mail.spam.spamassassin.cvs |
|---|---|
| Message-ID | <177981772422.3700967.11149143831930425632@svn03-he-fi> |
Author: fkento Date: Tue May 26 17:48:44 2026 New Revision: 1934648 Log: Change to scoring rule Modified: spamassassin/trunk/rulesrc/sandbox/fkento/20_misc.cf Modified: spamassassin/trunk/rulesrc/sandbox/fkento/20_misc.cf ============================================================================== --- spamassassin/trunk/rulesrc/sandbox/fkento/20_misc.cf Tue May 26 16:33:02 2026 (r1934647) +++ spamassassin/trunk/rulesrc/sandbox/fkento/20_misc.cf Tue May 26 17:48:44 2026 (r1934648) @@ -44,8 +44,6 @@ describe FKO_GOOGLE_LUCKY Google " uri FKO_DDG_DUCKY /^https?:\/\/(?:www\.)?duckduckgo\.com\/?\?(?:.*&)?q=!ducky/i describe FKO_DDG_DUCKY DuckDuckGo "I'm feeling ducky" search -uri __FKO_MS_OAUTH_SILENT /^https?:\/\/login\.microsoftonline\.com\/[^\/?\#]+\/oauth2\/(?:v2\.0\/)?authorize\?(?:[^"\s]*&)?prompt=none(?:&|$)/i -uri __FKO_MS_OAUTH_FAKE_URI /^https?:\/\/login\.microsoftonline\.com\/[^\/?\#]+\/oauth2\/(?:v2\.0\/)?authorize\?(?:[^"\s]*&)?uri=https?(?::|%3A)/i -meta FKO_MS_OAUTH_REDIR_ABUSE __FKO_MS_OAUTH_SILENT && __FKO_MS_OAUTH_FAKE_URI -score FKO_MS_OAUTH_REDIR_ABUSE 0.1 -describe FKO_MS_OAUTH_REDIR_ABUSE Microsoft OAuth authorize endpoint abused as a phishing redirector +uri FKO_MS_OAUTH_SILENT /^https?:\/\/login\.microsoftonline\.com\/[^\/?\#]+\/oauth2\/(?:v2\.0\/)?authorize\?(?:[^"\s]*&)?prompt=none(?:&|$)/i +score FKO_MS_OAUTH_SILENT 2.0 +describe FKO_MS_OAUTH_SILENT Microsoft OAuth authorize endpoint abused as a phishing redirector