Filter out mails that contain executable content as attachments

zaidsoft / webmail

A JSP based simple webmail (uses user email to sense IMAP server and connects to it)

Apache License 2.0

1 stars 1 forks source link

Filter out mails that contain executable content as attachments #2

Open szquadri opened 8 years ago

szquadri commented 8 years ago

Filter out (that is just hide from list) and do not let user view or act on mail that looks like Virus laden.

A simple check is to make sure we filter out by:

File extension (see https://support.google.com/mail/answer/6590?hl=en )
MIME Type by sniffing (see https://tika.apache.org/ )

Even if executable content is attached as zip we need to filter it out.

szquadri commented 8 years ago

An issue with this feature is that it requires processing (that means fetching mail messages from IMAP) of mail to filter out unwanted mails even before the list is build for rendering the list page. So fast rendering of mail list page may face issues. Needs more going through the java mail API to see what is possible.