]> git.ipfire.org Git - thirdparty/rspamd.git/commit
[Feature] Add rspamd_util.decode_html_entities and improve obfuscated URL detection 5761/head
authorVsevolod Stakhov <vsevolod@rspamd.com>
Sun, 23 Nov 2025 11:38:18 +0000 (11:38 +0000)
committerVsevolod Stakhov <vsevolod@rspamd.com>
Sun, 23 Nov 2025 11:38:18 +0000 (11:38 +0000)
commit5921a570062b50b7c938d09c34ca94fa197d48c8
tree6e85875505a2d2fcb53cc741099a83ccaf43d57e
parent935a9097f084d6a0ab0f4c59efc985e8648453b2
[Feature] Add rspamd_util.decode_html_entities and improve obfuscated URL detection

- Add Lua binding for HTML entity decoding (rspamd_util.decode_html_entities)
  wrapping rspamd_html_decode_entitles_inplace C function
- Switch obfuscated URL detection from regexp module to rspamd_trie
  for Hyperscan-accelerated multi-pattern matching
- Fix URL flag passing (use url.create with flags table instead of add_flag)
- Fix inject_url usage (doesn't return value)
- Add functional tests for obfuscated URL detection
src/lua/lua_util.c
src/plugins/lua/url_suspect.lua
test/functional/cases/001_merged/400_url_suspect.robot
test/functional/messages/url_obfuscated_bracket_dots.eml [new file with mode: 0644]
test/functional/messages/url_obfuscated_hxxp.eml [new file with mode: 0644]
test/functional/messages/url_obfuscated_spaced.eml [new file with mode: 0644]
test/functional/messages/url_obfuscated_word_dot.eml [new file with mode: 0644]