filter/vb_regexp

   1   (?:Content-                                   # start of content header
   2   (?:Type: (?>\s*)                              # rest of c/t header
   3     [\w-]+/[\w-]+                               # content-type (any)
   4     |Disposition: (?>\s*)                       # content-disposition hdr
   5     attachment)                                 # content-disposition
   6   ;(?>\s*)                                      # ; space or newline
   7   (?:file)?name=                                # filename=/name=
   8   |begin (?>\s+) [0-7]{3,4} (?>\s+))            # begin octal-mode
   9   (\"[^\"]+\.                                   # quoted filename.
  10         (?:vb[se]                               # list of extns
  11         |ws[fh]
  12         |jse?
  13         |exe
  14         |com
  15         |cmd
  16         |shs
  17         |hta
  18         |bat
  19         |scr
  20         |pif)
  21         \"                                      # end quote
  22   |[\w.-]+\.                                    # unquoted filename.ext
  23         (?:vb[se]                               # list of extns
  24         |ws[fh]
  25         |jse?
  26         |exe
  27         |com
  28         |shs
  29         |hta
  30         |bat
  31         |scr
  32         |pif)
  33   )                                             # end of filename capture
  34   [\s;]                                         # trailing ;/space/newline