|
Remove Obfuscated Code [20081221b]
|
|
Dec. 21, 2008, 03:28 AM
Post: #24
|
|||
|
|||
|
RE: Remove Obfuscated Code [20081220b]
Thanks for the additional testbed! I'm working on having a filter general enough to match both (and the IE PoC) while having minimal false positives.
EDIT: Updated. I decided to implement lnminente's "open script/closed script" variable, and also decided to not kill the rest of the page, but remove as much obfuscated code as possible (limited to 32767 bytes) and allow the page to still load. If you're already using your own "open script/closed script" filter, feel free to modify this filter. |
|||
|
« Next Oldest | Next Newest »
|

Search
Member List
Calendar
Help






![[-]](images/ONi/collapse.gif)