Needs review
Project:
Clientside Validation
Version:
4.1.2
Component:
Field Validation
Priority:
Normal
Category:
Bug report
Assigned:
Reporter:
Created:
1 Sep 2026 at 12:43 UTC
Updated:
3 Sep 2026 at 12:39 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #2
adityarawat_ln commentedHi @jurgenr,
I reproduced the issue and investigated the client-side validation behavior.
The invalid email containing the Unicode U+00A0 (non-breaking space) was correctly detected initially. However, when submitting the form, the client-side validation process was interrupted by a JavaScript exception:
Step attribute on input type time is not supported.
The form contained a type="time" field with a step attribute, which caused the jQuery Validation library to throw an exception during full form validation. Because the validation process was interrupted, the invalid email could bypass client-side validation and be submitted.
I applied a fix to handle the step validation for unsupported input types such as time, preventing the JavaScript exception and allowing the remaining client-side validation to run correctly.
After applying the fix:
Invalid emails containing U+00A0 are prevented from being submitted.
Valid emails submit successfully.
The JavaScript exception no longer occurs.
I have created and attached a patch for review and testing. Please review the patch and let me know your feedback.