Potential fix for code scanning alert no. 781: Inefficient regular expression (#61)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: archoun

assets/js/lib/jquery/plugins/validate/additional-methods.js

@@ -179,7 +179,25 @@ jQuery.validator.addMethod("strippedminlength", function(value, element, param)
 
 // same as email, but TLD is optional
 jQuery.validator.addMethod("email2", function(value, element, param) {
-	return this.optional(element) || /^((([a-z]|\d|[!#\$%&'\*\+\-\/=\?\^_`{\|}~]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])+(\.([a-z]|\d|[!#\$%&'\*\+\-\/=\?\^_`{\|}~]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])+)*)|((\x22)((((\x20|\x09)*(\x0d\x0a))?(\x20|\x09)+)?(([\x01-\x08\x0b\x0c\x0e-\x1f\x7f]|\x21|[\x23-\x5b]|[\x5d-\x7e]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(\\([\x01-\x09\x0b\x0c\x0d-\x7f]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF]))))*(((\x20|\x09)*(\x0d\x0a))?(\x20|\x09)+)?(\x22)))@((([a-z]|\d|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(([a-z]|\d|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])([a-z\d\-_~\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])*([a-z]|\d|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])))\.)*(([a-z]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])|(([a-z]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])([a-z\d\-_~\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])*([a-z]|[\u00A0-\uD7FF\uF900-\uFDCF\uFDF0-\uFFEF])))\.?$/i.test(value);
+	if (this.optional(element)) {
+		return true;
+	}
+
+	if (typeof value !== "string") {
+		return false;
+	}
+
+	var input = document.createElement("input");
+	input.type = "email";
+	input.value = value;
+
+	// Standard email validation (browser implementation).
+	if (typeof input.checkValidity === "function" && input.checkValidity()) {
+		return true;
+	}
+
+	// Allow optional TLD: accept local@domain where domain has no spaces/@ and does not end with dot.
+	return /^[^\s@]+@[^\s@.][^\s@]*[^.\s@]$/.test(value);
 }, jQuery.validator.messages.email);
 
 // same as url, but TLD is optional