forgot password dialog doesn't validate email addresses

[dbkr]

which is particularly amusing if the HS only allows certain email domains because it tells you the email domain is not authorised (otherwise it says email ot found which is maybe slightly less odd)

[peter-scholtens]

This can be very annoying as the browser (FF) may auto-fill it with the user name and password of the HS. As no check is done at all, the expectation is that an e-mail will correctly be send, however it will fail as the MX user name doesn't match the e-mail address of the user.

Some investigation how to implement this lead me to:
https://stackoverflow.com/questions/46155/how-to-validate-an-email-address-in-javascript
http://www.regular-expressions.info/email.html
Having read the subtleties of verifying the e-mail address in the above links, I would propose the following solution:

• Verify the address by making sure it contains at least a @ and ".", possibly further checking the string before, in-between and after them.
• If the check fails, given the user the suggestion to correct, but also the option to continue and confirm he/she is right.

This would solve the problem of (some) typo's and wrong auto-filled submits, while not blocking the "very.unusual.@.unusual.com"@example.com type of addresses.

I'll see if I can implement something like that.