Blocking content with ABE?

[access2godzilla]

Is blocking of requests based on its content possible with ABE? I know that I can do this:

Code: Select all

Site ^https?://.*exe
Accept from .sourceforge.net .mozilla.org
Deny

But what I'm trying to do can be perhaps described like this:

Code: Select all

# Block executables
Content /MZ.*PE/
Accept from .sourceforge.net .mozilla.org
Deny

Of course it does not help with zipped files or XORed payloads and such, but I was just wondering if it could be done...

[barbaz]

viewtopic.php?f=23&t=18991