Email validation fails on ampersand "&" sign

[cbosman-docksters]

Hi there,

I noticed the z.string().email() fails when the email contains an ampersand sign. This should be allowed.

Example:
z.string().email().parse("test&[email protected]")

[hkbertoson]

It looks like this was supported at one point. But it was removed.

[colinhacks]

Per #2157 Zod implements "Gmail rules" by default for email address validation.

You can use .superRefine for custom behavior:

const emailRegex =
  /^(?!\.)(?!.*\.\.)([A-Z0-9_'+-\.]*)[A-Z0-9_'+-]@([A-Z0-9][A-Z0-9\-]*\.)+[A-Z]{2,}$/i;

const emailSchema = z.string().superRefine((data, ctx) => {
  if (!emailRegex.test(data)) {
    ctx.addIssue({
      code: z.ZodIssueCode.invalid_string,
      message: "Invalid email address",
      validation: "email",
    });
  }
});