Use of an asterisk in blocked email domains prevents registration from any email address

selase · January 20, 2023, 11:44am

@Stephen Thanks for the report. This has been fixed.

github.com/discourse/discourse

FIX: Switch email domain site settings type to host_list

discourse:main ← discourse:fix/validate-email-domain-site-settings

opened 12:13PM - 19 Jan 23 UTC

s3lase

+25 -6

Specifying wildcard characters which also happen to be regex meta characters for… `auto_approve_email_domains`, `allowed_email_domains` and `blocked_email_domains` site settings currently breaks email validation. This change prevents these characters from being specified for these site settings. It does this by switching the site setting type from `list` to `host_list`. The `host_list` validator checks for these characters. In addition, this change also improves the site setting descriptions and introduces a migration to fix existing records.

Topic		Replies	Views
Users can't make new account (register error) Support	14	1353	January 8, 2023
Email domain blacklist with wildcards (revisited) Feature	5	2523	September 20, 2017
Email domain blacklist with wildcards Support	9	1792	May 13, 2015
Blocking spammer.<random>.domain registration attempts Support	2	39	September 29, 2025
Suggestion: Wildcard Block Email Address Feature	33	4302	December 7, 2021

Use of an asterisk in blocked email domains prevents registration from any email address

Related topics