Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

{http,smtp}/entities: Align header regexes with extract_filename_from_content_disposition()

Browse source
This commit is contained in:
Arne Welzel 2022-10-18 19:53:46 +02:00 • committed by Tim Wojtulewicz
parent 6ef9423f3c
commit 8b04868de3
6 changed files with 43 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
scripts/base/protocols/smtp/entities.zeek
View file

@ -63,7 +63,7 @@ event mime_one_header(c: connection, h: mime_header_rec) &priority=5
}
if ( h$name == "CONTENT-DISPOSITION" &&
/[fF][iI][lL][eE][nN][aA][mM][eE]/ in h$value )
/[fF][iI][lL][eE][nN][aA][mM][eE][[:blank:]]*\*?=/ in h$value )
c$smtp$entity$filename = extract_filename_from_content_disposition(h$value);
if ( h$name == "CONTENT-TYPE" &&