flora-pm / flora-server

A package index for the Haskell ecosystem
https://flora.pm/about
Other
123 stars 38 forks source link

Ensure that email addresses of users are normalised to unicode #561

Open tchoutri opened 5 days ago

tchoutri commented 5 days ago

Chrome sends IDNs converted to punycode, but we don't normalise those in the backend, which means that the database may be able to accept two user accounts with the same email address, once in punycode and once in unicode.

Since this conversion step is losseless it's not a problem. Email gateways however will (a lot of times) prefer punycode.