From 805c4d4c0904ed1fef007cbd5fa992ad16225e5c Mon Sep 17 00:00:00 2001 From: Dhairyashil Shinde <93669429+dhairyashiil@users.noreply.github.com> Date: Mon, 3 Nov 2025 17:29:14 +0530 Subject: [PATCH] fix: dont allow email exclusion bypass with capital letters (#24741) * fix: dont allow email exclusion bypass with capital letters * trim before lowercasing to filter out empty tokens * update console message * use only regex change to implement this * use only regex change to implement this --- packages/prisma/zod-utils.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/prisma/zod-utils.ts b/packages/prisma/zod-utils.ts index 56025f6e0d..402a7beb3a 100644 --- a/packages/prisma/zod-utils.ts +++ b/packages/prisma/zod-utils.ts @@ -796,7 +796,7 @@ export type FieldType = z.infer; export const excludeOrRequireEmailSchema = z.string().superRefine((val, ctx) => { const allDomains = val.split(",").map((dom) => dom.trim()); - const regex = /^(?:@?[a-z0-9-]+(?:\.[a-z]{2,})?)?(?:@[a-z0-9-]+\.[a-z]{2,})?$/; + const regex = /^(?:@?[a-z0-9-]+(?:\.[a-z]{2,})?)?(?:@[a-z0-9-]+\.[a-z]{2,})?$/i; /* Valid patterns - [ example, example.anything, anyone@example.anything ]