#3212: notification email check too strict
-----------------------------------------------------+----------------------
 Reporter:  Dinko Korunic <[EMAIL PROTECTED]>  |       Owner:  jonas
     Type:  defect                                   |      Status:  new  
 Priority:  low                                      |   Milestone:       
Component:  ticket system                            |     Version:  0.9.5
 Severity:  normal                                   |    Keywords:       
-----------------------------------------------------+----------------------
 Email checks in notification.py are '''too strict'''. For instance '+' and
 '=' delimiters can be used in '''username''' part of RFC822 address but
 they are not allowed - see the code:

 File notification.py, revision 3356, line 138:

 {{{
 addrfmt = r"[\w\d_\.\-]+\@(([\w\d\-])+\.)+([\w\d]{2,4})+"
 }}}

 I'd suggest adding '+' and '=', as well as allowing \% as
 username/hostname delimiter too. And there is possibility of someone using
 [EMAIL PROTECTED] addresses too (think relaying).

-- 
Ticket URL: <http://projects.edgewall.com/trac/ticket/3212>
The Trac Project <http://trac.edgewall.com/>
_______________________________________________
Trac-Tickets mailing list
[email protected]
http://lists.edgewall.com/mailman/listinfo/trac-tickets

Reply via email to