42,390 blogs · 5,361,753 posts Claim your blog

Record · corpus.blog/posts/01a0fcb0-b475-70f0-8435-478f576689d5

Gotchas in Email Parsing - Lessons From Jakarta Mail - elttam

elttam.com · published 24 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at elttam.com Wayback capture

1blogs citing

First cited: 23 Nov 2025
Most recent: 23 Nov 2025
Rank this month: not ranked
External links: 12
Words captured: 2,889

Cited by

Blog

In the post

Date

Research Worth Reading Week 47/2025 Read at the source ↗

23 Nov 2025

Links from this post

Link

Host

https://github.com/javaee/javamail/blob/master/mail/src/main/java/javax/mail/internet/InternetAddress.java

github.com

https://portswigger.net/research/splitting-the-email-atom

portswigger.net

https://nathandavison.com/blog/exploiting-email-address-parsing-with-aws-ses

nathandavison.com

https://datatracker.ietf.org/doc/html/rfc822

datatracker.ietf.org

https://medium.com/@fs0c131y/tchap-the-super-not-secure-app-of-the-french-government-84b31517d144

medium.com

https://eclipse-ee4j.github.io/angus-mail/

eclipse-ee4j.github.io

https://jakarta.ee/specifications/mail/2.1/

jakarta.ee

https://datatracker.ietf.org/doc/html/rfc2047

datatracker.ietf.org

https://github.com/hibernate/hibernate-validator/blob/main/engine/src/main/java/org/hibernate/validator/internal/constraintvalidators/bv/EmailValidator.java

github.com

https://github.com/hibernate/hibernate-validator/blob/main/engine/src/main/java/org/hibernate/validator/internal/util/DomainNameUtil.java

github.com

https://github.com/elttam/semgrep-rules/tree/main/rules/java/audit/email-validation/jakarta-mail-email-primitives.yml

github.com

https://github.com/elttam/publications/blob/master/slides/Primitives%20for%20Security%20Audits%20-%20Lessons%20from%20Jakarta%20Mail%20-%20For%20Dist.pdf

github.com