famfoandEarl Warren cf1fda81f6 fix: properly validate email containing comments ...

Originally reported by jomo (https://jomo.tv). A malicious actor could
register with an email address containing a comment, for example
"attacker@evil (comment@broken)". This commit fixes this issue by only
operating on normalized email addresses.

Signed-off-by: famfo <famfo@famfo.xyz>

2025-08-30 09:45:14 +02:00

..

binding_test.go

Validate OAuth Redirect URIs (#32643)

2024-12-03 10:19:22 +01:00

binding.go

chore: branding import path (#7337)

2025-03-27 19:40:14 +00:00

email_test.go

feat: relax email requirements (#7829)

2025-05-22 12:20:25 +02:00

email.go

fix: properly validate email containing comments

2025-08-30 09:45:14 +02:00

glob_pattern_test.go

[CHORE] Use forked binding library

2024-11-05 22:47:34 +01:00

helpers_test.go

chore: QoL improvements to tests (#7917)

2025-05-21 15:45:56 +02:00

helpers.go

fix: allow instance API URLs in release assets (#7644)

2025-06-09 10:01:59 +02:00

refname_test.go

[CHORE] Use forked binding library

2024-11-05 22:47:34 +01:00

regex_pattern_test.go

[CHORE] Use forked binding library

2024-11-05 22:47:34 +01:00

validatable_test.go

enhance validateable interface (#7714)

2025-05-30 13:07:35 +02:00

validatable.go

Sent user activities to distant federated server (#8792)

2025-08-06 16:16:13 +02:00

validurl_test.go

[CHORE] Use forked binding library

2024-11-05 22:47:34 +01:00

validurllist_test.go

Validate OAuth Redirect URIs (#32643)

2024-12-03 10:19:22 +01:00