Hello there,

While working on JAMES-3646 incorrect file validation, I came to
discover the file mail queue incorrectly sanitizes file paths.

This is one of the many flows of this component. Here are some others:

FileMailQueue is an outdated unmaintained component suffering incomplete
features and is not thread safe" +
    "This includes: " +
    " - JAMES-2298 Unsupported remove management feature" +
    " - JAMES-2954 Incomplete browse implementation" +
    " - JAMES-2544 Mixing concurrent operation might lead to a deadlock and
missing fields" +
    " - JAMES-2979 dequeue is not thread safe

(To quote its test)

It is not directly configurable with any exosting products.

There are some alternatives: embedded activeMQ has zero dependencies.
Furthermore migrating is easy: just migrate with an empty queue - which
can be done easily with a SMTP downtime.

Also the component is deprecated for 1.5 years, given the many flows it
have, given that no contributors shows up to keep it alive, I advocate
removal.

Feedback?

Regards,

Benoit


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscr...@james.apache.org
For additional commands, e-mail: server-dev-h...@james.apache.org

Reply via email to