StanleyNeoh / pe

0 stars 0 forks source link

Editing user email to be uppercase. #3

Open StanleyNeoh opened 1 year ago

StanleyNeoh commented 1 year ago

image.png

Originally, Jun Jie has an email of limjunjie@gmail.com

image.png

However, after I edited the email to be LIMJUNJIE@gmail.com, the update is successful despite emails being case insensitive.

How to replicate: Edit the email of an existing user to the same email except with some alphabet characters turned uppercase or lowercase.

Expected outcome: There should not be any update.

Actual outcome: There is an update made.

I have put this as a low severity as it is quite rare for users to update the email to the same email but of a different case.

soc-se-bot commented 1 year ago

Team's Response

FAid allows the user to edit the email of the SAME person to another identical email with different casing. This is for multiple reasons

  1. This gives users flexibility in editing the emails of the same client

  2. It is actually a feature flaw not to allow users to edit an email with different casing

If we were to not allow users to change emails to the same ones with different casing, it will be too restrictive. Since email address is not case sensitive, displaying it with caps in the UI or the app does not affect the recipient email address that an email is ultimately sent to.

Items for the Tester to Verify

:question: Issue response

Team chose [response.Rejected]

Reason for disagreement: [replace this with your explanation]