From 0a2f8dfab3287e240e39f27fba6d979cbdd8c334 Mon Sep 17 00:00:00 2001 From: Pete Matsyburka Date: Sat, 26 Sep 2026 17:16:37 +0300 Subject: [PATCH] validate 2fa email --- lib/submitters.rb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/submitters.rb b/lib/submitters.rb index 99b0884db..68fe86aaa 100644 --- a/lib/submitters.rb +++ b/lib/submitters.rb @@ -252,6 +252,8 @@ module Submitters end def send_shared_link_email_verification_code(submitter, request:) + raise UnableToSendCode, I18n.t(:provide_your_email) if submitter.email.to_s.count('@') > 1 + RateLimit.call("send-otp-code-#{request.remote_ip}", limit: 2, ttl: 45.seconds, enabled: true) if Docuseal.multitenant? && email_bounced_recently?(submitter.email)