This plugin uses several methods to search attached documents for evidence of an OLE Macro.
OLEMacro max mime parts - olemacro_num_mime
The maximum number of matching MIME parts the plugin will scan.
Default: 5
OLEMacro max zip members - olemacro_num_zip
The maximum number of matching zip members the plugin will scan.
Default: 8
OLEMacro max zip depth - olemacro_zip_depth
The max depth to recurse within zip files.
Default: 2
OLEMacro extended scan - olemacro_extended_scan
Scan more files for potential macros, olemacro_skip_exts still honored. This is off by default and should not be needed.
If this is turned on consider adjusting values for olemacro_num_mime and olemacro_num_zip and prepare for more CPU
overhead.
Default: 0
OLEMacro prefer content-disposition - olemacro_prefer_contentdisposition
The content-disposition header filename be preferred if ambiguity is encountered whilst trying to get filename.
Default: 1
OLEMacro max file size - olemacro_max_file
The largest file that the plugin will decode from the MIME objects.
Default: 1024000
OLEMacro scan extensions - olemacro_exts
The extensions the plugin targets for macro scanning.
Default: (?:doc|docx|dot|pot|ppa|pps|ppt|rtf|sldm|xl|xla|xls|xlsx|xlt|xslb)$
OLEMacro macro extensions - olemacro_macro_exts
The extensions the plugin treats as containing a macro.
Default: (?:docm|dotm|ppam|potm|ppst|ppsm|pptm|sldm|xlm|xlam|xlsb|xlsm|xltm|xps)$
OLEMacro zips - olemacro_zips
The extensions for the plugin to target as zip files.
Default: (?:zip)$
OLEMacro skip extensions - olemacro_skip_exts
The extensions for the plugin to skip entirely, these should only be guaranteed macro free files.
Default: (?:dotx|potx|ppsx|pptx|sldx|xltx)$
OLEMacro skip ctypes - olemacro_skip_ctypes
The Configure types for the plugin to skip entirely, these should only be guaranteed macro free.
Default: ^(?:text\/)