[VALIDATOR-315] Email validator does not properly validate symbolic domain names

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.4.0 Release
• Fix Version/s: 1.4.1 Release
• Assignee: Unassigned
• Reporter: Christopher Schultz
• Created: 05/Feb/13 19:30
• Updated: 13/Jan/15 20:02
• Resolved: 03/Jan/15 02:58

Description

This returns true:

EmailValidator.getInstance().isValid("me@at&t.net")

...when IMO it should not. If the portion of the address after the @ is symbolic, then it should be validated like a host name which may only contain [A-Za-z0-9-\.] and has a few other requirements as well (no leading or trailing hyphen or empty 'label', max 63 characters per label, max 255 characters total length).

I'm less interested in the limits, etc. but an '&' is not valid in a hostname and it would be nice to fail under those conditions. Use of IDN should pretty much allow any letter or number (\p

{Alnum}

).