A text/html message which seems to sneak an <img src> off-site ref past

I like how mhonarc strips out all the non-local links from HTML
mail messages.  Almost all HTML messages we get on sources.redhat.com
are spam, and all off-site links are undesirable.  I noticed one
spam that appears to have snuck an inlined off-site link past
mhonarc.  Here's the mhonarc'ed version:

        http://sources.redhat.com/ml/bug-gnu-utils/2001-11/msg00391.html

There is a link to the raw message at the top, but I munge the
headers of the mail note at display-time so you won't be able to
run that through mhonarc yourself.  I'll append the untouched
message as mhonarc received it below.  My configuration has the
following MIMEargs set:

<MIMEArgs>
application/*: subdir usename usenameext
audio/*:       subdir usename usenameext
text/html:     nofont
text/plain:    attachcheck
</MIMEArgs>

As I understand 2.5.1's HTML defanging code, I think this message
is showing a bug. I haven't looked into this code path in detail,
but I wanted to pass it along anyway in case something jumps out
at someone.

Thanks,

Jason

badpost.txt.uu
Description: Text document