Repository navigation

Scope punycode replacement to the address part the detection came from - #77

Merged

jeremy merged 23 commits into

mainfrom

partaware-sanitizer

Oct 20, 2026

Merged

Scope punycode replacement to the address part the detection came from#77
jeremy merged 23 commits into
mainfrom
partaware-sanitizer

Commits on Oct 20, 2026
- Punycode an offending label only within the address component it came from
  jeremy
  committed
  af046cf
- Anchor the angle-address lookup outside quoted strings and comments
  jeremy
  committed
  2332adb
- Locate the addr-spec inside the structural angle-address and the display name outside comments
  jeremy
  committed
  73884b4
- Scan quotes, domain literals and comments as RFC 5322 does when locating the angle-address
  jeremy
  committed
  2348012
- Skip comments inside the angle-address and match a commented label as a whole component
  jeremy
  committed
  470b221
- Split labels on dots outside comments and let a trailing-comment display name keep its span
  jeremy
  committed
  2c2c98e
- Accept a display name inside a comment even within the addr-spec span
  jeremy
  committed
  bceedfb
- Split labels with one nesting-aware scan instead of regular expressions
  
  authored and
  jeremy
  committed
  21d9d20
- Handle nested spans, unlocated names and routes, and search the field linearly
  
  authored and
  jeremy
  committed
  964105c
- Keep a display name inside one comment, and check route domains as domains
  
  authored and
  jeremy
  committed
  c78edb8
- Keep comment delimiters out of name matches, parse route domains, nest spans
  
  authored and
  jeremy
  committed
  ec5f6bb
- Keep escapes whole in name matches, check the mailbox without comments
  
  authored and
  jeremy
  committed
  81ff17d
- Leave a display name that is not in the field as written untouched
  
  authored and
  jeremy
  committed
  0167a05
- Match a label that keeps whitespace against its component as written
  
  authored and
  jeremy
  committed
  6b05499
- Split the angle-address at its last @ when the parser reports no local part
  
  authored and
  jeremy
  committed
  18ca9ac
- Take the rest of the field as the domain when the parser reports no local part
  
  authored and
  jeremy
  committed
  8799feb
- Span the whole field when the parser folds the mailbox into the domain
  
  authored and
  jeremy
  committed
  56a676e
- Keep the overlapping display-name timing test about the name search
  
  authored and
  jeremy
  committed
  49cbbec
- Keep a nested comment's parentheses out of display-name matches
  jeremy
  committed
  f70f6f8
- Split a bare domain on every dot when sanitizing it
  jeremy
  committed
  b609582
- Note the per-label rules and part-scoped sanitizing in the changelog
  jeremy
  committed
  cd30f70
- Set a bare domain's padding apart the way the detector does
  jeremy
  committed
  5a24663
- Keep a route's domain literal whole and out of the domain check
  jeremy
  committed
  f320830

Commits

Commits on Oct 20, 2026