Bug 149 - Rule to detect large font sizes
Summary: Rule to detect large font sizes
Status: RESOLVED FIXED
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (show other bugs)
Version: 2.30CVS
Hardware: All All
: P2 enhancement
Target Milestone: ---
Assignee: Craig Hughes
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-03-27 20:08 UTC by Matthew Cline
Modified: 2002-06-15 03:58 UTC (History)
0 users



Attachment Type Modified Status Actions Submitter/CLA Status
Rule to detect font sizes of 3 or more text/plain None Matthew Cline [HasCLA]
Now detects font size "+2" and up or size "3" and up text/plain None Matthew Cline [HasCLA]

Note You need to log in before you can comment on or make changes to this bug.
Description Matthew Cline 2002-03-27 20:08:26 UTC
The following rule should detect font size of 3 or larger in HTML mail:

rawbody  BIG_FONT
/<\s*FONT\s[^>]*size\s*=(?:3D)?\s*['\"]?\s*\+?(?:[3456789]|\d{2,})/i
describe BIG_FONT A font size of 3 or larger

Will also add an attachment, to get around formatting problems.
Comment 1 Matthew Cline 2002-03-27 20:08:49 UTC
Created attachment 26 [details]
Rule to detect font sizes of 3 or more
Comment 2 James Henstridge 2002-03-28 00:54:30 UTC
Isn't font size="3" meant to be the user's prefered font size?  Seems a bit
silly to penalise normal sized text.
Comment 3 Matthew Cline 2002-03-28 01:01:37 UTC
Hmmm, right, I'd forgotten that there's a difference between size="3" and 
size="+3".  However, size="3" rarely shows up in any of my non-spam, but is
frequent in my spam.  If you want to use the default size, then you don't need
any font tag at all.
Comment 4 Daniel Rogers 2002-03-28 08:53:50 UTC
Would it be worth adding something to check for <h1>, <h2>, etc?  I do see them
showing up in some spams, sometimes in conjunction with large font sizes, just
to make things _really_ big.

Dan.
Comment 5 Matthew Cline 2002-03-31 18:38:16 UTC
Created attachment 37 [details]
Now detects font size "+2" and up or size "3" and up
Comment 6 Theo Van Dinter 2002-04-09 15:31:43 UTC
in case no one else reassigns it ...
Comment 7 Matthew Cline 2002-04-09 17:14:20 UTC
Checked into CVS.