From: "John W. Long" Date: 2003-07-29T13:10:41+09:00 Subject: Re: smtp.sendmail security > I'm surprised that Net::STMP lets you do that. It really should be set up so when taint checking is on, it won't let you do that. Suffice to say that is very bad. You shouldn't allow that to happen. I agree it's somewhat interesting, but it seems to take whatever I enter in and do some munging of it's own on it. For example, if I enter in for an email address: "John";"Bill" it seems to convert this to something like: "John;Bill