Email validation is hard. With the vast amount of complex, but valid email addresses that exist today, the only way to truly tell if an email addre...
For further actions, you may consider blocking this person and/or reporting abuse
You could also use
<input type="email">if you're targeting not-edge.I always jump to the RFC-5322 standard regex (emailregex.com/), but the above seems smaller and less complicated for most projects that don't need to 100% cover all cases.
This regular expression does not validate the new top level domains such as https://はじめよう.みんな/index.html
You can use
uat the end to do unicode validation too IIRC.Email addresses do in fact allow spaces in the local part. Your regex leads to false negatives. See en.wikipedia.org/wiki/Email_addres.... Though practically speaking you will probably never encounter emails which use this advanced syntax, precisely because developers implement regexen like this which lead to false negatives and make such addresses unusable.
Word of advice, never regex for an email address. Check out this article with a list of crazy yet valid email addresses.
hackernoon.com/the-100-correct-way...
Also, the assumption at the beginning about bounced emails isn't valid either. The server may send an unknown email address into a black hole (no bounce), whereas a valid known email address may bounce for reasons such as a full inbox or invalid contents of the mail being sent.
The closest thing you'll get is having the user click a link within the email. But also have the link in plain text as well in case the user agent strips out HTML.
If you're using it as an optional field, why not just have a "send test notification" action available?
If it needs to be valid for any other reason (like proving someone's identity) then it's probably a forlorn hope anyway.
This - close the loop at the next layer up if possible, typically seen in registration systems that send a confirmation link.
Your regex doesn't allow for many valid email addresses. Basically just about anything before the "@" symbol (the local part) is allowed. A lot of gmail addresses have the format
some.name@gmail.com
"The local part can be up to 64 characters in length and consist of any combination of alphabetic characters, digits, or any of the following special characters:
! # $ % & ‘ * + – / = ? ^ _ ` . { | } ~
NOTE: The period character (“.”) is valid for the local part subject to the following restrictions:
mailboxvalidator.com/resources/art...
There are possibilities to validate if an email exists without sending an email. Your backend can open a socket the the email server of the email address and ask for the address. I'm not 100% sure if there could be a bouncer rule based on the content but it ensures at least that the given email address accepts emails from your server.
Here is an telnet example for this: webdigi.co.uk/blog/2009/how-to-che...
This probably only works for a few percent of mail servers these days, most will accept any RCPT TO address, wait for the DATA block and then black hole or reply with an error via a separate outbound message. Specifically done to permit more filtering (anti-spam etc.) and to /prevent/ these sorts of validity checks as they are popular with spammers (can't think why :))
Great advice here! It's always better to fix things on a company side, over making things worse for users. At one of my old jobs, we had some issues with an email regex that wasn't permissive enough - I believe the user had a quotation mark in their email, which is perfectly valid, but we had never seen it before.