[PATCH] Re: the evasive message discussed on the list

[David Relson]

On Thu, 6 Nov 2003 20:46:34 -0600
John McCain <jmccain at layer3al.com> wrote:

> On Thursday 06 November 2003 07:13 pm, David Relson wrote:
> > John,
> >
> > Below are the first few lines of the first mime part.  They're
> > clearly labeled "text/plain", so bogofilter treats it as plain text.
> >  I'd call
> > this a message sent by a broken mailer.
> 
> My bad.  I misunderstood your question.
> 
> If I understand your point, if the message were labelled "html",
> bogofilter would process it correctly.  Obviously, therefore,
> mislabelling the message is part of the evasive tactic, which puts us
> back at square one.

John,

That is correct.  If the content was labeled "text/html" (as per the
relevant standards), bogofilter would do fine.

You are also the second person in less than a week to encounter:

	Content-Type: text/html

	<!DOCTYPE ...>

Are other people seeing this same behavior?  If so, please let us know.

Also, for those inclined to experiment, the attached patch will
recognize some forms of the DOCTYPE line and switch to HTML mode.  If
there's merit to it, perhaps it should become official.

David
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: patch.lexer_v3.l.1106.txt
URL: <http://www.bogofilter.org/pipermail/bogofilter/attachments/20031106/1a8d8695/attachment.txt>