Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on PHPMailer Exploit – Remote Code Execution. Parent comment
And yes, that is, technically, a valid email address:
"\"Attacker\\' -Param2 -Param3\"@test.com"
"Attacker\' -Param2 -Param3"@test.com
(Email addresses suck and this is not me saying that this is sane.)
There are no comments on this comment yet.
And yes, that is, technically, a valid email address:
gets interpreted by the shell (or by PHP, or by whatever else is responsible for handling backslash-escaped entities in quoted strings) as and "Attacker\' -Param2 -Param3" is a valid local-part: https://tools.ietf.org/html/rfc5321#section-4.1.2(Email addresses suck and this is not me saying that this is sane.)