Skip to content

Fixed: createEmailAddress and updateEmailAddress accept blank email addresses (OFBIZ-13582) - #2002

Merged
mridulpathak merged 1 commit into
apache:release24.09from
mridulpathak:OFBIZ-13582-release24.09
Sep 15, 2026
Merged

mridulpathak merged 1 commit into
apache:release24.09from
mridulpathak:OFBIZ-13582-release24.09

Conversation

@mridulpathak

Copy link
Copy Markdown
Contributor

Backported from trunk (#2001).

…ddresses (OFBIZ-13582)

Both methods gated only on UtilValidate.isEmail(parameters.emailAddress), which returns true for a null or blank string by design. Combined with the servicedef declaring emailAddress required but with no type-validate rule, and the service engine's required-parameter check only rejecting null rather than blank, a caller passing an empty string sailed through and created or updated a real ContactMech with a blank infoString. The original minilang had two explicit checks, not-empty then format-valid, so both methods now reject a blank emailAddress before the format check runs.
@mridulpathak
mridulpathak merged commit a2fcc9d into apache:release24.09 Sep 15, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant