Email validation is too lax

[ebruchez]

• Email address ending with "/" is valid, e.g. info@orbeon.com/.
• Email with no TLD (or just TLD) is considered valid, e.g. info@orbeon. While in some contexts such email might be valid, it doesn't make much sense to accept it as valid in the context of a web form.

[avernet]

Updated title to make this issue more general, and added case of the missing TLD.

+1 from customer

[avernet]

I was hoping we could use JavaMail for this, but unfortunately, info@orbeon.com/ passes the validation.

import javax.mail.internet.InternetAddress
val email = new InternetAddress("info@orbeon.com/")
email.validate()

[avernet]

Apache Validator does a better job:

import org.apache.commons.validator.routines.EmailValidator
EmailValidator.getInstance(false).isValid("info@orbeon.com/")