4 ms·
We're jerks and just strip everything down to a-Z space .- and @ _ anything beyond that f u, extensions and 3rd party library or even core filters come out with
by cdevs 10y ago
We're jerks and just strip everything down to a-Z space .- and @ _ anything beyond that f u, extensions and 3rd party library or even core filters come out with these vulnerabilities all the time, at least we will know for sure what characters were passed in from the start though I'm sure most business NEED to support every wacky combination but I'll take the complaint over the hack any day.
- hartz 10y agoSo you are one of those sites that reject email addresses with "+" in it?
- sethammons 10y agoThat's a less than ideal solution. As another comment mentioned, you are screwing over legit email addresses with things like +. Better is to use better tooling. For sending email, I would use SendGrid or an alternative.
- Piskvorrr 10y agosomeone123@example.com is not amused. Might as well say "we throw out every e-mail that contains the letter 'b', because Reasons. Makes us feel warm, fuzzy and secure."