filter/vb_regexp

   1   (?:Content-                                   # start of content header
   2   (?:Type: (?>\s*)                              # rest of c/t header
   3     [\w-]+/[\w-]+                               # content-type (any)
   4     |Disposition: (?>\s*)                       # content-disposition hdr
   5     attachment)                                 # content-disposition
   6   ;(?>\s*)                                      # ; space or newline
   7   (?:file)?name=                                # filename=/name=
   8   |begin (?>\s+) [0-7]{3,4} (?>\s+))            # begin octal-mode
   9   (\"[^\"]+\.                                   # quoted filename.
  10         (?:vb[se]                               # list of extns
  11         |ws[fh]
  12         |jse?
  13         |exe
  14         |com
  15         |shs
  16         |hta
  17         |bat
  18         |scr
  19         |pif)
  20         \"                                      # end quote
  21   |[\w.-]+\.                                    # unquoted filename.ext
  22         (?:vb[se]                               # list of extns
  23         |ws[fh]
  24         |jse?
  25         |exe
  26         |com
  27         |shs
  28         |hta
  29         |bat
  30         |scr
  31         |pif)
  32   )                                             # end of filename capture
  33   [\s;]                                         # trailing ;/space/newline