[VALIDATOR-190] EmailValidator allows control characters (ASCII 0-31)

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.3.0 Release
• Fix Version/s: 1.3.1 Release
• Component/s: Routines
• Assignee: Niall Pemberton
• Reporter: Cott Lang
• Created: 01/Jun/06 23:48
• Updated: 12/Nov/07 19:25
• Resolved: 23/Nov/06 13:15

Description

EmailValidator allows ASCII 0 - 31 in an email address.

According to RFC 821, these are forbidden.

import org.apache.commons.validator.EmailValidator;

public class Test {

public static void main(String[] args)

{ EmailValidator ev = EmailValidator.getInstance(); String email ="\[e-mail]"; System.err.println(ev.isValid(email)); }

}