Spam blacklist can be evaded by adding square bracket to URL
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	• bzimport
	Dec 24 2005, 6:46 AM

Description

Author: dotkorg

Description:
The spam blacklist extension will not match URLs which contain square brackets. For
example, if a line in a blacklist file is:

example\.com

then [http://spam.example.com/] will be blocked but
[http://spam.[.example.com/] will be ignored.

Cheers, Korg

Version: unspecified
Severity: normal
URL: http://jv.wiktionary.org/w/index.php?title=Wiktionary:About&curid=1607&diff=4087&oldid=4057

Unknown Object (Diffusion Commit)

• bzimport raised the priority of this task from to Medium.Nov 21 2014, 9:01 PM

• bzimport set Reference to bz4377.

• bzimport added a subscriber: Unknown Object (MLST).

Since that wouldn't be a valid URL, it shouldn't be getting picked up as a link at all.

dotkorg wrote:

The URL seems to be valid, we can go to the website.

It's invalid in that the "]" character is explicitly disallowed in URLs. Some software is lax in
treating this.

Any such invalid links are now broken.

dotkorg wrote:

Thanks Brion!

epriestley added a commit: Unknown Object (Diffusion Commit).Mar 4 2015, 8:15 AM