fix: prevent email change to blacklisted email address

bin/frontend/controls/profile/UserData.js

@@ -96,12 +96,14 @@ define('package/quiqqer/frontend-users/bin/frontend/controls/profile/UserData',
 
                 Promise.all([
                     Registration.emailSyntaxValidation(email),
-                    Registration.emailValidation(email)
+                    Registration.emailValidation(email),
+                    Registration.isEmailBlacklisted(email)
                 ]).then(function (result) {
-                    var emailSyntaxValid = result[0];
-                    var emailValid       = result[1];
+                    const emailSyntaxValid = result[0];
+                    const emailValid       = result[1];
+                    const isBlacklisted    = result[2];
 
-                    if (emailSyntaxValid && emailValid) {
+                    if (emailSyntaxValid && emailValid && !isBlacklisted) {
                         self.$clearEmailErrorMsg();
                         return;
                     }
@@ -117,6 +119,12 @@ define('package/quiqqer/frontend-users/bin/frontend/controls/profile/UserData',
                             QUILocale.get(lg, 'controls.profile.userdata.email_already_taken')
                         );
                     }
+
+                    if (isBlacklisted) {
+                        self.$showEmailErrorMsg(
+                            QUILocale.get(lg, 'exception.registrars.email.email_blacklisted')
+                        );
+                    }
                 });
             };
 

src/QUI/FrontendUsers/Controls/Profile/UserData.php

@@ -133,6 +133,13 @@ public function onSave()
                 ]);
             }
 
+            if (QUI\FrontendUsers\Utils::isEmailBlacklisted($newEmail)) {
+                throw new QUI\FrontendUsers\Exception([
+                    'quiqqer/frontend-users',
+                    'exception.registrars.email.email_blacklisted'
+                ]);
+            }
+
             FrontendUsersHandler::getInstance()->sendChangeEmailAddressMail(
                 $User,
                 $newEmail,