[Bug 8401] Redirectors plugin incorrectly promotes arbitrary query parameter values into hostnames for URIDNSBL lookups

[email protected] Fri, 26 Jun 2026 21:42:39 +0000
Newsgroups gmane.mail.spam.spamassassin.devel
Message-ID <[email protected]/SpamAssassin/>
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=3D8401

Bill Cole <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #1 from Bill Cole <[email protected]> ---
I have tried with multiple versions to reproduce your result with your mess=
age
and have been unable to do so. E.g. this is with the current svn 'trunk' co=
de:

  $ spamassassin --version
  SpamAssassin version 4.0.3-r1932428
    running on Perl version 5.34.3

  $ spamassassin -t -D uri ~/Downloads/sustack-fp-8401.eml 2>&1 |egrep
'cleaned|added|parsed' | grep to8ex
  Jun 26 17:29:39.697 [28040] dbg: uri: cleaned uri:
https://substack.com/signup?utm_source=3Dsubstack&utm_medium=3Demail&utm_co=
ntent=3Dfooter&utm_campaign=3Dautofilled-footer&freeSignupEmail=3Dbulwark@g=
tenney.com&r=3Dto8ex

This is the current Redirectors.pm:

  $ md5sum ./lib/Mail/SpamAssassin/Plugin/Redirectors.pm
  2761f706296ccc680aebf9ff1ac45580
./lib/Mail/SpamAssassin/Plugin/Redirectors.pm

Does yours match?

--=20
You are receiving this mail because:
You are the assignee for the bug.=