[Esa-l] Re: Idea: Multiple extension detector
Quinn Yost
yost at cyclops.endinfosys.com
Tue Jun 13 13:26:23 PDT 2000
Actually, the ideal would be to trap on
*.${MANGLE_EXTENSIONS}.${MANGLE_EXTENSIONS}
My personal experience has shown that trapping on anything else yields a
high percent of false positives.
Brett Glass wrote:
>
> At 08:34 PM 6/12/2000, John D. Hardin wrote:
>
> >True. I doubt, however, that something like:
> >
> > *.[a-z0-9]+.${MANGLE_EXTENSIONS}
> >
> >would actually work... :)
>
> That's a good point! *Is* there a way to slip
> variable interpolations into the string?
>
> --Brett
>
> _______________________________________________
> E-mail Security Announce list mailing list
> E-mail Security Announce list at spconnect.com
> http://www.spconnect.com/mailman/listinfo/esa-l
More information about the esd-l
mailing list