dohaduong / pe

0 stars 0 forks source link

Invalid email with invalid domain are accepted #4

Open dohaduong opened 1 year ago

dohaduong commented 1 year ago

Using command add n/K e/email@111.222.333.44444, the app still accepts the email as an invalid email, even tho the domain is clearly invalid.

Thus, as the DG/UG did not mention anything regarding this, I will consider this as a feature flaw

image.png

soc-pe-bot commented 1 year ago

Team's Response

We accept this as a feature flaw however we believe that this is not in scope for these reasons:

Emails are also difficult to check for due to the many possible variations. Below is an excerpt of valid email addresses according to wikipedia: image.png

We believe that this is more of a 'nice to have feature' than a feature flaw

Items for the Tester to Verify

:question: Issue response

Team chose [response.NotInScope]

Reason for disagreement: I agree that emails are difficult to check, thus I have stated this bug is Low severity. However, it is clear that @111.222... is not a valid domain.

The team did not mention in both UG and DG that they will be improving/fixing/taking into account the complexity of valid email domain/email and thus, I would still consider this a valid feature flaw.