From 26c9780417431659fbb39b5a8048c1debe6f6127 Mon Sep 17 00:00:00 2001
From: Michael Hoennig <michael@hoennig.de>
Date: Fri, 13 Dec 2024 10:11:00 +0100
Subject: [PATCH] add " to "emailAddressRegEx validation

---
 .../hs/office/contact/HsOfficeContactRbacRepository.java      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/main/java/net/hostsharing/hsadminng/hs/office/contact/HsOfficeContactRbacRepository.java b/src/main/java/net/hostsharing/hsadminng/hs/office/contact/HsOfficeContactRbacRepository.java
index ec2b15d1..1e82a7ac 100644
--- a/src/main/java/net/hostsharing/hsadminng/hs/office/contact/HsOfficeContactRbacRepository.java
+++ b/src/main/java/net/hostsharing/hsadminng/hs/office/contact/HsOfficeContactRbacRepository.java
@@ -36,9 +36,9 @@ public interface HsOfficeContactRbacRepository extends Repository<HsOfficeContac
 
     static String emailRegEx(@NotNull String emailAddress) {
         // TODO.impl: find more secure solution, maybe we substitute a placeholder with the whole expression?
-        if (emailAddress.contains("'") || emailAddress.endsWith("\\") ) {
+        if (emailAddress.contains("'") || emailAddress.contains("\"") || emailAddress.endsWith("\\") ) {
             throw new ValidationException(
-                    "emailAddress contains invalid characters: " + emailAddress);
+                    "emailAddressRegEx contains invalid characters: " + emailAddress);
         }
         return emailAddress.replace("%", ".*"); // the JSON-matcher in PostgreSQL needs a wildcard
     }