#
# Revisions :
# $Log: re_filterfile,v $
+# Revision 1.12 2001/10/07 15:46:42 oes
+# Followed Guy's proposal to change the document.cookie job
+#
+# Revision 1.11 2001/09/21 12:34:00 joergs
+# Added filter to replace "Nimda" code by a warning.
+#
+# Revision 1.10 2001/07/20 11:04:26 oes
+# Added Rodneys javascript cookie filter
+#
+# Revision 1.9 2001/07/13 14:03:48 oes
+# Elimiated yet another bug in the banner-by-size jobs. Shame on me!
+#
# Revision 1.8 2001/06/29 13:34:00 oes
# - Added explanation for U and T options
# - Added hint on image replacement by CGI call
# ********************************************************************/
#
-# The status bar is for displaying link targets, not pointless buzzwords.
+# The status bar is for displaying link targets, not pointless descriptions.
# Again, check it out on http://www.airport-cgn.de/
#
# ********************************************************************/
s/status='.*?';*//ig
+# ********************************************************************/
+#
+# Get rid of Javascript cookies, like found on privacy.net:
+#
+# ********************************************************************/
+
+s|(document\.cookie)([ \t\r\n]*=)|documenZapCooky$2|g
+
# ********************************************************************/
#
# Kill *all* popups a la popup.c. (But for *all* sites, so I wouldn't do that.)
# Squish WebBugs:
#
# ********************************************************************/
-s/<img\s+[^>]*?(width|height)\s+=\s+['"]?1\D[^>]*?(width|height)\s+=\s+['"]?1\D[^>]*?>/<!-- Squished WebBug -->/sig
+s/<img\s+[^>]*?(width|height)\s*=\s*['"]?1\D[^>]*?(width|height)\s*=\s*['"]?1(\D[^>]*?)?>/<!-- Squished WebBug -->/sig
# ********************************************************************/
#
#
# ********************************************************************/
s/(\w+) was tired/<b>$1 needed more coffee<\/b>/ig
+
+# ********************************************************************/
+#
+# Remove Nimda code.
+#
+# ********************************************************************/
+s%<script language="JavaScript">(window\.open|1;''\.concat)\("readme\.eml", null, "resizable=no,top=6000,left=6000"\)</script>%<br><hr><font size=7><b>Internet J</b></font><b><font size=6>UNK</font><font size=5 color="red"><i>BUSTER</i></font></b><font size=7> WARNING: This Server is infected with <a href="http://www.cert.org/advisories/CA-2001-26.html">Nimda</a>!</font>%g