forked from fedi/mastodon
7177e37b99
* Stricter whitelist rules * Linting * Added spec for blacklisting * Test subdomain blacklist on domain whitelist * No need to split * Change spec name
32 lines
850 B
Ruby
32 lines
850 B
Ruby
# frozen_string_literal: true
|
|
|
|
class EmailValidator < ActiveModel::EachValidator
|
|
def validate_each(record, attribute, value)
|
|
record.errors.add(attribute, I18n.t('users.invalid_email')) if blocked_email?(value)
|
|
end
|
|
|
|
private
|
|
|
|
def blocked_email?(value)
|
|
on_blacklist?(value) || not_on_whitelist?(value)
|
|
end
|
|
|
|
def on_blacklist?(value)
|
|
return false if Rails.configuration.x.email_domains_blacklist.blank?
|
|
|
|
domains = Rails.configuration.x.email_domains_blacklist.gsub('.', '\.')
|
|
regexp = Regexp.new("@(.+\\.)?(#{domains})", true)
|
|
|
|
value =~ regexp
|
|
end
|
|
|
|
def not_on_whitelist?(value)
|
|
return false if Rails.configuration.x.email_domains_whitelist.blank?
|
|
|
|
domains = Rails.configuration.x.email_domains_whitelist.gsub('.', '\.')
|
|
regexp = Regexp.new("@(.+\\.)?(#{domains})$", true)
|
|
|
|
value !~ regexp
|
|
end
|
|
end
|