dxbjavid opened a new pull request, #399:
URL: https://github.com/apache/commons-net/pull/399

   quoteMailboxName is what wraps mailbox names before they go into 
SELECT/CREATE/RENAME/COPY/etc., but it only quotes when the value has a space 
and never looks at line terminators. A name like `INBOX\r\nA001 DELETE "Sent"` 
is passed through untouched, so the CRLF ends the line and the rest is sent as 
a second IMAP command on the control connection. Rejecting CR/LF here, the same 
way SimpleSMTPHeader/SimpleNNTPHeader already do, closes that off without 
changing the existing quoting behavior.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to