Email Regexp Security Issue

[mbrio]

I've been testing Devise and noticed that the regexp for validating correct emails seems to be insecure. The current implementation in ~/config/initializers/devise.rb uses a regexp that checks for the beginning and end of a line using ^ and $ when I believe it should be using \A and \z so that harmful characters can not be used to concatenate an XSS attack. I only noticed this when I went over the Rails Guide at guides.rubyonrails.org entitled "Securing Rails Applications" (http://guides.rubyonrails.org/security.html).

[josevalim]

Fix e-mail regexp. Closed by b50fd1a