#27029: Make EmailValidator accept non-ASCII characters
-------------------------------------+-------------------------------------
     Reporter:  Ramin Farajpour      |                    Owner:  j-bernard
  Cami                               |
         Type:                       |                   Status:  assigned
  Cleanup/optimization               |
    Component:  Core (Other)         |                  Version:  dev
     Severity:  Normal               |               Resolution:
     Keywords:                       |             Triage Stage:  Accepted
    Has patch:  1                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  0
-------------------------------------+-------------------------------------

Comment (by Carlton Gibson):

 The new PR seems ''OK™'' — for
 [https://docs.python.org/3.11/library/re.html#index-34 strings `\w`] is
 equivalent  to `[a-zA-Z0-9_]` with ASCII, and the unicode examples then
 pass.

 I worry slightly about bringing in a host of lookalike address
 vulnerabilities. 🤔

 I think this needs a discussion to decide the way forward.

 1. I'm not convinced this is really a distinct issue to #26423.
 2. [The https://groups.google.com/d/topic/django-
 developers/ASBJ0ge2KYo/discussion mailing list discussion] was essentially
 unanimous to radically simplify here (rather than continue to tweak).

 Florian's comment:21 more or less sums it up:

 > ...propose to change the current email validator to just check if "@" is
 in the address and be done with it.

 We've said similar with URLValidator a number of times.

 I'm not sure we shouldn't (again) mark this as a duplicate of #26423, re-
 purpose that to simplify the validation, make sure ''How to customise
 validation'' shows the way forward clearly, and then close everything else
 in this area as `wontfix`. 🤔

-- 
Ticket URL: <https://code.djangoproject.com/ticket/27029#comment:30>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/010701859b164686-31ff4c07-99ac-45f5-97eb-889bc6651743-000000%40eu-central-1.amazonses.com.

Reply via email to