Ticket #38506: 38506.2.diff

src/wp-includes/rest-api.php

@@ -1036 +1036 @@
                                 break;
 
                         case 'email' :
-                                if ( ! is_email( $value ) ) {
+                                // is_email() checks for 3 characters (a@b), but
+                                // wp_handle_comment_submission() requires 6 characters (a@b.co)
+                                //
+                                // https://core.trac.wordpress.org/ticket/38506
+                                if ( ! is_email( $value ) || strlen( $value ) < 6 ) {
                                         return new WP_Error( 'rest_invalid_email', __( 'The email address you provided is invalid.' ) );
                                 }
                                 break;

tests/phpunit/tests/rest-api/rest-comments-controller.php

@@ -897 +897 @@
                 update_option( 'require_name_email', 0 );
         }
 
+        public function test_create_comment_author_email_too_short() {
+                wp_set_current_user( 0 );
+
+                $params = array(
+                        'post'         => self::$post_id,
+                        'author_name'  => 'Homer J. Simpson',
+                        'author_email' => 'a@b',
+                        'content'      => 'in this house, we obey the laws of thermodynamics!',
+                );
+
+                $request = new WP_REST_Request( 'POST', '/wp/v2/comments' );
+                $request->add_header( 'content-type', 'application/json' );
+                $request->set_body( wp_json_encode( $params ) );
+                $response = $this->server->dispatch( $request );
+
+                $this->assertErrorResponse( 'rest_invalid_param', $response, 400 );
+
+                $data = $response->get_data();
+                $this->assertArrayHasKey( 'author_email', $data['data']['params'] );
+        }
+
         public function test_create_item_invalid_blank_content() {
                 wp_set_current_user( 0 );