Re: Message-ID should surely not be shown as a mailto: URL

From: Andrew Sullivan <ajs(at)commandprompt(dot)com>
To: pgsql-www(at)postgresql(dot)org
Subject: Re: Message-ID should surely not be shown as a mailto: URL
Date: 2008-06-09 13:55:04
Message-ID: 20080609135503.GB83012@commandprompt.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-www

On Mon, Jun 09, 2008 at 02:30:55AM -0400, Tom Lane wrote:
>
> Hm, I wonder if sloppiness of this sort accounts for the remarkable
> prevalence in my mail logs of spam-sign like this:
>
> Jun 9 00:44:06 sss2 sm-mta[4062]: m594i5Ns004062: <19570(dot)1142971720(at)sss(dot)pgh(dot)pa(dot)us>... User unknown

Good bet.

> I don't pretend to know what is the approved way to deal with these
> issues, but *this* can't be best practice.

Obviously, someone is looking for something that _looks_ like a mail
address, attempting to munge it, and on the way through, changing it
to a mailto: link. I think some parsing of the RFC2821/2822 headers
is needed first, so that one doesn't do this for things like the
message id.

A

--
Andrew Sullivan
ajs(at)commandprompt(dot)com
+1 503 667 4564 x104
http://www.commandprompt.com/

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Andrew Dunstan 2008-06-09 14:00:29 Re: pg_dump restore time and Foreign Keys
Previous Message Mark Cave-Ayland 2008-06-09 13:18:50 Strange issue with GiST index scan taking far too long

Browse pgsql-www by date

  From Date Subject
Next Message Alvaro Herrera 2008-06-09 14:34:17 Re: Message-ID should surely not be shown as a mailto: URL
Previous Message David Fetter 2008-06-09 13:34:55 Re: [ANNOUNCE] == PostgreSQL Weekly News - June 08 2008 ==