Prevent users from switching their email to a blacklisted domain
Summary
Credit to @luculent and @medworthy for highlighting this issue
See discussion at: minds#2477
We should be preventing users from changing their email addresses to blacklisted domains.
Steps to reproduce
- Make a blacklisted email account
- Sign up using a non-blacklisted email
- In your settings, change to the blacklisted one.
Platform information
Platform agnostic.
What is the current bug behavior?
User can change to blacklisted email.
What is the expected correct behavior?
Blacklist should be checked like on registration - fix should work for mobile.
Relevant logs and/or screenshots
Possible fixes
Look at how we handle it for registration