Email assert passes empty string

[yuri-karkh]

    /**
     * @var string
     * @ORM\Column(name="email", type="string", length=100, unique=true)
     * @Assert\Email(
	 *     message="Email is not valid",
	 *     mode="html5"
	 * )
     */
    private $email;

passing empty string as an email passed validation. var_dump of the $validator->validate( $object ); is below.

object(Symfony\Component\Validator\ConstraintViolationList)#3636 (1) {
 ["violations":"Symfony\Component\Validator\ConstraintViolationList":private]=>
 array(0) {
 }
}

Also found similar issue here:
#4244

I can confirm that if use together with NotBlank() constraint Email() constraint works as expected. So not very obvious behaviour of assertion.

[javiereguiluz]

@yuri-karkh thanks for reporting this. I know it may be confusing at first, but I've asked about this in the Symfony Slack chat and the community told me the reason why Symfony does this.

If EmailValidator displays an error when you pass an empty string, the validator is doing two different things: validating the format of email address and making them mandatory (because if you pass null or empty string, you see an error).

So it's better to keep this as is. If you want to only validate email address, without requiring them, use EmailValidator. If you want to validate emails and require them (not allow empty strings or null values) then use EmailValidator and NotBlank together. I'm going to propose some changes in the docs about this. Thanks!

[yuri-karkh]

thanks for the reply @javiereguiluz. Agree that it will be better to have some notes in docs about this.

[javiereguiluz]

We're trying to improve this in #10407.

[javiereguiluz]

Fixed by #10407.