svn commit: r1937046 - spamassassin/trunk/rulesrc/sandbox/jhardin
| Newsgroups | gmane.mail.spam.spamassassin.cvs |
|---|---|
| Message-ID | <178637637034.499924.1615281169265713639@svn03-he-fi> |
Author: jhardin Date: Mon Aug 10 15:39:30 2026 New Revision: 1937046 Log: Fix FP in __URI_DOTCN_SPOOF, bug#8407 Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Modified: spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf ============================================================================== --- spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Mon Aug 10 14:38:08 2026 (r1937045) +++ spamassassin/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf Mon Aug 10 15:39:30 2026 (r1937046) @@ -4424,7 +4424,7 @@ tflags CN_PHISH_JP_07 p ifplugin Mail::SpamAssassin::Plugin::URIDetail - uri_detail __URI_DOTCN_SPOOF text =~ m;^https?://(?:[^./]+\.)+(?!cn/)[^/]+/;i domain =~ /\.cn$/i + uri_detail __URI_DOTCN_SPOOF text =~ m;^https?://(?:[^./]+\.)+(?!cn/)[^./]+/;i domain =~ /\.cn$/i meta URI_DOTCN_SPOOF __URI_DOTCN_SPOOF score URI_DOTCN_SPOOF 3.000 # limit describe URI_DOTCN_SPOOF .CN TLD for non-.CN visible URL - likely Chinese phishing