[Important] Bypass email validation

Hello,

If i simply use this code to check an email in CI :

PHP Code:

$this->form_validation->set_rules('email', 'email', 'trim|required|valid_email'); 


I just to need to send a form with this input :

Code:

"><svg/onload=confirm(1)>"@x.y

and I can bypass email validation....

The solution is to fix valid_email from Form_validation.php and add :

PHP Code:

$email = filter_var($email, FILTER_SANITIZE_EMAIL); 


You should fix it in CI 3.2 !