Re: [Assp-test] MIME subject decoding

[Katip <ka...@ka...>]

my redRe is simply: Subject\:\s*[^\r\n]+bayram
("bayram" only should match and is always somewhere within few first words)
encoded subject doesn't match but all others where a human readable 
"bayram" somehow appears.
i must find encoded version of " bayram" and add a redRe accordingly.

IGJheXJhb ;)

came across a great tool here : 
http://www.percederberg.net/tools/text_converter.html

Katip

On 25.09.2015 10:08, Thomas Eckardt wrote:
>> Subject: =?utf-8?B?YmF5cmFtIHRlYnJpxJ9pLi4=?=
> It is more easy than you think. Show the mail in your client or decode it
> in assp and put the human readable (or transliterated) subject in to the
> regex.
>
> IMHO , redRe will find both, the encoded and the decoded variant
>
> (?:^|\n)Subject:\s*=\?utf-8\?B\?YmF5cmFtIHRlYnJpxJ9pLi4=\?=
> (?:^|\n)subject:\s*bayram\s+tebriği\.\.
>
> using the encoded variant, the regex will not match, if the next mail is
> encoding the same subject with 'quoted printable' - like
> Subject: =?utf-8?Q?bayram tebri=C4=9Fi=?=
>
> or the characterset is changed like:
>
> Subject: =?ISO-8859-3?Q?bayram tebri=BBi=?=
>
> This belongs to all regular expressions. Never try to search for any
> MIME-encoded content - search for human readable text or the
> transliterated variant.
>
> real unicode: - subject: bayram tebriği..
> transliterated: - subject: bayram tebrigi..
>
> The GUI analyzer has a switch to transliterate an email.
>
> Thomas
>
>
>
>
>
> Von:    Katip <ka...@ka...>
> An:     ASSP development mailing list <ass...@li...>
> Datum:  25.09.2015 07:56
> Betreff:        [Assp-test] MIME subject decoding
>
>
>
> bombSubjectRe
> "...the mail subject will be automatically checked against RFC2047 (for
> NON printable characters in the undecoded MIME content)"
>
> i wonder if the same would be possible to identify a redRe in subjects
> such as:
> Subject: =?utf-8?B?YmF5cmFtIHRlYnJpxJ9pLi4=?=
>
> as far as i see there is no option for this. any workaround? TIA
>
> Katip
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Assp-test mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
>
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential, legally
> privileged and protected in law and are intended solely for the use of the
>
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no
> known virus in this email!
> *******************************************************
>
>
>
>
> ------------------------------------------------------------------------------
>
>
> _______________________________________________
> Assp-test mailing list
> Ass...@li...
> https://lists.sourceforge.net/lists/listinfo/assp-test