From: Vsevolod Stakhov <vsevolod@highsecure.ru>
Date: Thu, 28 Nov 2019 17:21:09 +0000 (+0000)
Subject: [Minor] Lua_content: Make regexp more strict
X-Git-Tag: 2.3~285
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ea0584a431a49eb3fc682ccb3b8d6fc80a99db37;p=thirdparty%2Frspamd.git

[Minor] Lua_content: Make regexp more strict
---

diff --git a/lualib/lua_content/pdf.lua b/lualib/lua_content/pdf.lua
index a531396dbd..6676d6d36b 100644
--- a/lualib/lua_content/pdf.lua
+++ b/lualib/lua_content/pdf.lua
@@ -46,7 +46,7 @@ local pdf_patterns = {
     patterns = {
       [[netsh\s]],
       [[echo\s]],
-      [[/[A-Za-z]*#\d\d]], -- Hex encode obfuscation
+      [[/[A-Za-z]*#\d\d(?:[#A-Za-z<>/\s])]], -- Hex encode obfuscation
     }
   }
 }