2 Commits

Author	SHA1	Message	Date
Ollama	d6f9f4e16e	fix(security): Allow empty email addresses in customer import ... - Empty emails are now allowed (customers may not have email addresses) - Validation only applies when email is non-empty - Added test case for empty email acceptance This fixes a regression where FILTER_VALIDATE_EMAIL rejected empty strings, breaking imports for customers without email addresses.	2026-06-07 08:39:15 +02:00
Ollama	4b924d3f82	test(security): Add tests for customer CSV import email validation ... Tests cover: - Valid email acceptance - Invalid email rejection with row-specific error - XSS payload sanitization in email field - Mixed valid/invalid email handling - Email with special characters sanitization Verifies fixes for customer email import vulnerability.	2026-06-06 22:37:34 +02:00