Improper Validation of Certificate with Host Mismatch

object ReceiptMailer {
  @throws[Exception]
  def send(): Unit = {
    // VULNERABLE: Improper Validation of Certificate with Host Mismatch
    val plain = new SimpleEmail
    plain.setHostName("smtp.internal")
    plain.setSSLOnConnect(false)

    // VULNERABLE: Improper Validation of Certificate with Host Mismatch
    val plainOverTls = new SimpleEmail
    plainOverTls.setHostName("smtp2.internal")
    plainOverTls.setSSLOnConnect(true)

    // VULNERABLE: Improper Validation of Certificate with Host Mismatch
    val withAttachment = new MultiPartEmail
    withAttachment.setHostName("smtp3.internal")
    withAttachment.setSSLOnConnect(true)

    // VULNERABLE: Improper Validation of Certificate with Host Mismatch
    val html = new HtmlEmail
    html.setHostName("smtp4.internal")
    html.setSSLOnConnect(true)

    // VULNERABLE: Improper Validation of Certificate with Host Mismatch
    val withImages = new ImageHtmlEmail
    withImages.setHostName("smtp5.internal")
    withImages.setSSLOnConnect(true)
    withImages.setSSLCheckServerIdentity(true)

    // The identity check set before the connect flag is the control for call order.
    // VULNERABLE: Improper Validation of Certificate with Host Mismatch
    val checkedFirst = new ImageHtmlEmail
    checkedFirst.setHostName("smtp6.internal")
    checkedFirst.setSSLCheckServerIdentity(true)
    checkedFirst.setSSLOnConnect(true)

    // VULNERABLE: Improper Validation of Certificate with Host Mismatch
    val unchecked = new ImageHtmlEmail
    unchecked.setHostName("smtp7.internal")
    unchecked.setSSLOnConnect(true)
  }
}