[Esa-l] Re: Idea: Multiple extension detector

Quinn Yost yost at cyclops.endinfosys.com
Tue Jun 13 13:26:23 PDT 2000


Actually, the ideal would be to trap on  
*.${MANGLE_EXTENSIONS}.${MANGLE_EXTENSIONS}

My personal experience has shown that trapping on anything else yields a
high percent of false positives.


Brett Glass wrote:
> 
> At 08:34 PM 6/12/2000, John D. Hardin wrote:
> 
> >True. I doubt, however, that something like:
> >
> >  *.[a-z0-9]+.${MANGLE_EXTENSIONS}
> >
> >would actually work... :)
> 
> That's a good point! *Is* there a way to slip
> variable interpolations into the string?
> 
> --Brett
> 
> _______________________________________________
> E-mail Security Announce list mailing list
> E-mail Security Announce list at spconnect.com
> http://www.spconnect.com/mailman/listinfo/esa-l




More information about the esd-l mailing list