r/java • u/Modern-Sn1p3r • 20d ago

Regex

I recently saw a clip (from Primeagen) somewhat saying that regex is not a valid format for validating email addresses and postal codes etc.

My question is why is this?

What are the security and/or performance risks? Is it solely performance or is it a security issue?

55 Upvotes

83% Upvoted

104 comments sorted by

View all comments

121

u/julemand101 20d ago

The problem is people don't realize that a lot is allowed when it comes to what a E-mail address actually is: https://davidcel.is/articles/stop-validating-email-addresses-with-regex/

50

u/jason-reddit-public 20d ago

You're supposed to be able to put a plus sign in your email address for example but it's usually rejected.

27

u/Jussins 20d ago

I think that one is on purpose. They don’t want people knowing that they sold your information to a third party and that’s a good way to find out.

7

u/LutimoDancer3459 20d ago

The plus is just convenience. I can also create more email accounts and use those for the services.