scVENUS / PeekabooAV

Peekaboo Extended Email Attachment Behavior Observation Owl
https://peekabooav.de
GNU General Public License v3.0
66 stars 20 forks source link

expressions cannot express empty set #193

Closed michaelweiser closed 2 years ago

michaelweiser commented 2 years ago

Trying to express the empty set in an expression rule like so:

expression.0: filereport.mime_types & { 'text/plain', 'inode/x-empty'} != {} -> ignore

leads to a parsing error. Likely, pyparsing's delimitedList does not accept the empty list.