What's the best incantation to block js files only when they occur within an archive file?
...are two hierarchy's that are pretty common in phishing mails right now. It used to be confined to actual email attachments, but now we're seeing the trend move to links in emails.
I don't believe I have any rules like this, and of course, blocking .js outright would make the web pretty darned uninteresting.
TIA for any experience on this!