bug#51733: 27.1; Detect impossible email addresses better

[Andreas Schwab]

On Jan 19 2022, Lars Ingebrigtsen wrote:

> Consider somebody sending you an email containing @", characters in the
> name part, and then you decode the address, and then run the parsing
> function.  The attacker would then have a wide attack surface to trick
> the checker into checking the wrong parts of the address.

Isn't that the whole point of textsec?

-- 
Andreas Schwab, schwab@linux-m68k.org
GPG Key fingerprint = 7578 EB47 D4E5 4D69 2510  2552 DF73 E780 A9DA AEC1
"And now for something completely different."