Mailing List Archive

On 2022-08-24 at 13:11:11 UTC-0400 (Wed, 24 Aug 2022 17:11:11 +0000
(UTC))
Pedro David Marco via users <pedrod_marco@yahoo.com>
is rumored to have said:

> Hi,
> is there any way to make SA ignore hidden text in  anchors in URI
> checks?  (using uri_deatil)
> just an example:
> <a href="https://fakeurl.com">Ke<span style="font-size: 0%; display:
> none;">XXX</span>ep</a>
>
> SA renders anchor_text  as:    KeXXXep
> but i would like it to  be:   Keep
>

There are no plans to implement an instrumented HTML renderer in SA. :)
So gnerically, no: SA cannot tell that a piece of body text is invisible
and should be removed from what it sees as 'body text' for rules.

I think there are some rules that would catch the specific styling, as
both mechanisms there to make the text invisible are exceedingly sketchy
and disreputable in email.

Do you have a spample that gets past SA without hitting rules on that
span tag?



--
Bill Cole
bill@scconsult.com or billcole@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire

>On 2022-08-24 at 13:11:11 UTC-0400 (Wed, 24 Aug 2022 17:11:11 +0000 (UTC))
>Pedro David Marco via users <pedrod_marco@yahoo.com> is rumored to have
>said:

>>is there any way to make SA ignore hidden text in? anchors in URI
>>checks?? (using uri_deatil)
>>just an example:
>><a href="https://fakeurl.com">Ke<span style="font-size: 0%; display:
>>none;">XXX</span>ep</a>
>>
>>SA renders anchor_text? as:? ? KeXXXep
>>but i would like it to? be:? ?Keep

On 24.08.22 14:50, Bill Cole wrote:
>There are no plans to implement an instrumented HTML renderer in SA.

perhaps ExtractText module could do that.
It's available in SA4 (currently beta afaik) and on:
https://github.com/DavidGoodwin/ExtractText


--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
2B|!2B, that's a question!

NOTE that I don't believe the version in SA4 is the same as that github
version.  I'd recommend the one in the SA 4.0.0 RC1.

On 8/29/2022 1:10 PM, Matus UHLAR - fantomas wrote:
> perhaps ExtractText module could do that.
> It's available in SA4 (currently beta afaik) and on:
> https://github.com/DavidGoodwin/ExtractText

--
Kevin A. McGrail
KMcGrail@Apache.org

Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171

>On 8/29/2022 1:10 PM, Matus UHLAR - fantomas wrote:
>>perhaps ExtractText module could do that.
>>It's available in SA4 (currently beta afaik) and on:
>>https://github.com/DavidGoodwin/ExtractText

On 30.08.22 01:00, Kevin A. McGrail wrote:
>NOTE that I don't believe the version in SA4 is the same as that
>github version.? I'd recommend the one in the SA 4.0.0 RC1.

I just wanted to point to version that MIGHT to work with former SA
versions.

Of course I recommend trying SA4 too (works here from Debian experimental).

--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Chernobyl was an Windows 95 beta test site.

Thanks to all,
it should be much easier and simple. Currently Permsgstatus contains both visible and invisible rendered html from thre body, What in my modest opinion should be very usefullwould be to have the same when it comes to anchors from links.
Reagrds,
Pete.

On Tuesday, August 30, 2022 at 10:33:41 AM GMT+2, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:

>On 8/29/2022 1:10 PM, Matus UHLAR - fantomas wrote:
>>perhaps ExtractText module could do that.
>>It's available in SA4 (currently beta afaik) and on:
>>https://github.com/DavidGoodwin/ExtractText

On 30.08.22 01:00, Kevin A. McGrail wrote:
>NOTE that I don't believe the version in SA4 is the same as that
>github version.  I'd recommend the one in the SA 4.0.0 RC1.

I just wanted to point to version that MIGHT to work with former SA
versions.

Of course I recommend trying SA4 too (works here from Debian experimental).