fix(email-validation): reject quoted emails with blacklisted characters

validatorjs · Oct 6, 2024 · 7d7153d · 7d7153d
1 parent 66ddd9c
commit 7d7153d
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/lib/isEmail.js b/src/lib/isEmail.js
@@ -163,7 +163,14 @@ export default function isEmail(str, options) {
   }
 
   if (options.blacklisted_chars) {
+    // Check for blacklisted characters in the raw user part
     if (user.search(new RegExp(`[${options.blacklisted_chars}]+`, 'g')) !== -1) return false;
+
+    // If the user part is quoted, remove the quotes and recheck
+    if (user[0] === '"' && user[user.length - 1] === '"') {
+      const strippedUser = user.slice(1, user.length - 1);
+      if (strippedUser.search(new RegExp(`[${options.blacklisted_chars}]+`, 'g')) !== -1) return false;
+    }
   }
 
   if (user[0] === '"' && user[user.length - 1] === '"') {