Knowledgebase

None of our applications depend on Java Spring or any other Java library and are thus not affected by this vulnerability.

All of our products are being developed in Delphi or C#. Although we use Spring4D(elphi) with some of the components, they are safe to use, because the reported vulnerability applies to Java Spring framework only.

This applies to all versions and editions of our applications (TreeSize, SpaceObServer, SpaceObServer WebAccess, HeavyLoad, SmartPOP2Exchange, Exchange Server Toolbox, SpamAssassin in a Box, SpamAssassin for Windows, SmartCallMonitor, SEPA-Transfer, ServerSentinel, and ShellBrowser). It is recommended to always use the latest available versions though to benefit from the latest patches, improvements, and features.

Please make a screenshot of the call stack (RAD Studio > View > Debug Window > Call Stack) when the exception is reported in the IDE, and email this screenshot to us.

If the call stack window is empty, please ensure that these options are set at
"Project > Options > Delphi Compiler > Compiling":

· Code Generation > Stack Frames: True
· Debugging > Debug information: True
· Debugging > Use debug DCUs: True

A good way to receive exception and crash reports is using an error tracing tool like EurekaLog or MadExcept - they catch run-time errors and crashes and display a call stack and other information, which the customer can send back to you.

To turn off dialogs for handled exceptions in the IDE, uncheck
Tools > Options > Debugger Options > Embarcadero Debuggers > Language Exceptions > Notify on language Exceptions

In case the exception occurs in a dll, you can open the library in RAD Studio, and set the "host application" the in Run > Parameters dialog. This allows you to debug the library and receive exceptions.

You cannot write context menu handlers that will work with Windows Explorer using ShellBrowser.

However you can customize the context menu that will be displayed in the ShellBrowser controls, e.g. the TJamShellList:

• Add a TPopupMenu and implement the actions to be taken
• Select your custom PopupMenu in the "PopupMenu" property of the TJamShellList
• Set the "ShowContextMenuOnTop" property to show your custom entries above or below the normal shell context menu's entries.

As ShellBrowser makes use of the preview handlers in the system via a  limited official interface, the previews are unfortunately "as is".

If you are requesting additional features, you mostly have to find a different preview. Especially for pdf several programs providing preview handlers are available.

It seems, that depending on the Windows version, the system's preview handler is not automatically registered.

You can do so manually in the registry, or implement the "OnLoadPreview" event to assign the Preview Handler GUID, e.g. :

if (UpperCase(ExtractFileExt(eventArgs.Path)) = '.EML') then begin
   eventArgs.PreviewHandlerGuid := TShellPreviewHandlerGuids.Mime;

All of our products are being developed in Delphi or C#. Although we use Log4Net with some of the components, they are safe to use, because the reported vulnerability applies to Log4J only.

None of our applications depend on Log4J or any other Java library and are thus not affected by this vulnerability.

This applies to all versions and editions of our applications (TreeSize, SpaceObServer, SpaceObServer WebAccess, HeavyLoad, SmartPOP2Exchange, Exchange Server Toolbox, SpamAssassin in a Box, SpamAssassin for Windows, SmartCallMonitor, SEPA-Transfer, ServerSentinel, and ShellBrowser). It is recommended to always use the latest available versions though to benefit from the latest patches, improvements, and features.

We provide various sample projects that demonstrate different aspects of usage.

You can download the samples as pre-compiled version under the following links:

ShellBrowser Delphi

ShellBrowser.NET

ShellBrowser WPF

You can find the source code of the examples in the "Samples" or "Examples" subfolder of the ShellBrowser installation directory.

For ShellBrowser.NET and ShellBrowser.WPF sample code is also available at GitHub:

ShellBrowser.NET

ShellBrowser.WPF

We will officially support RAD Studio 12 with ShellBrowser Delphi ComponentsV12.1, which is expected for December 2023. Customers under maintenance may request a prerelease of ShellBrowser through our contact form.

You can use the OnBeforeShellCommand event and check for both the affected files and the command and replace the default behavior by your own.

The ShellTree does indeed restrict this operation to avoid long running operations, so you have to add this functionality writing a custom function, that iterates and expands all nodes.