NYCPHP Meetup

[Daniel Krook]

Sorry,

This:

> So it would seem if you ventured past the parts of the 
> JavaMail API which 
> allow you to use Strings, instead of creating 
> InternetAddress objects and 
> hardcoding the subject, you would be "safe" from the 
> exploit, but you 
> should double check any methods that you are using that 
> expect Strings.

should read: 

So it would seem if you did *not* venture into the parts of the JavaMail 
API which allow you to use Strings, instead of creating InternetAddress 
objects and hardcoding the subject, you would be "safe" from the exploit. 
Otherwise, you should double check any methods that you are using that 
expect Strings.




Daniel Krook, Advisory IT Specialist 
Application Development, Production Services - Tools, ibm.com

Personal: http://info.krook.org/
BluePages: http://bluepages.redirect.webahead.ibm.com/
BlogPages: http://blogpages.redirect.webahead.ibm.com/