Add support for blocklisting e-mail domains.

E-mails in the domain blocklist are disallowed on the admin UI, public
subscription forms, API, and in the bulk importer.

- Add blocklist setting that takes a list of multi-line domains on the
  Settings -> Privacy UI.
- Refactor e-mail validation in subimporter to add blocklist checking
  centrally.
- Add Cypress testr testing domain blocklist behaviour on admin
  and non-admin views.

Closes #336.

cmd/bounce.go

@@ -6,10 +6,8 @@ import (
 	"io/ioutil"
 	"net/http"
 	"strconv"
-	"strings"
 	"time"
 
-	"github.com/knadh/listmonk/internal/subimporter"
 	"github.com/knadh/listmonk/models"
 	"github.com/labstack/echo"
 	"github.com/lib/pq"
@@ -164,12 +162,12 @@ func handleBounceWebhook(c echo.Context) error {
 			return echo.NewHTTPError(http.StatusBadRequest, app.i18n.Ts("globals.messages.invalidData"))
 		}
 
-		if err := validateBounceFields(b, app); err != nil {
+		if bv, err := validateBounceFields(b, app); err != nil {
 			return err
+		} else {
+			b = bv
 		}
 
-		b.Email = strings.ToLower(b.Email)
-
 		if len(b.Meta) == 0 {
 			b.Meta = json.RawMessage("{}")
 		}
@@ -234,22 +232,26 @@ func handleBounceWebhook(c echo.Context) error {
 	return c.JSON(http.StatusOK, okResp{true})
 }
 
-func validateBounceFields(b models.Bounce, app *App) error {
+func validateBounceFields(b models.Bounce, app *App) (models.Bounce, error) {
 	if b.Email == "" && b.SubscriberUUID == "" {
-		return echo.NewHTTPError(http.StatusBadRequest, app.i18n.T("globals.messages.invalidData"))
+		return b, echo.NewHTTPError(http.StatusBadRequest, app.i18n.T("globals.messages.invalidData"))
 	}
 
-	if b.Type != models.BounceTypeHard && b.Type != models.BounceTypeSoft {
-		return echo.NewHTTPError(http.StatusBadRequest, app.i18n.T("globals.messages.invalidData"))
+	if b.SubscriberUUID != "" && !reUUID.MatchString(b.SubscriberUUID) {
+		return b, echo.NewHTTPError(http.StatusBadRequest, app.i18n.T("globals.messages.invalidUUID"))
 	}
 
-	if b.Email != "" && !subimporter.IsEmail(b.Email) {
-		return echo.NewHTTPError(http.StatusBadRequest, app.i18n.T("globals.messages.invalidEmail"))
+	if b.Email != "" {
+		em, err := app.importer.SanitizeEmail(b.Email)
+		if err != nil {
+			return b, echo.NewHTTPError(http.StatusBadRequest, err.Error())
+		}
+		b.Email = em
 	}
 
-	if b.SubscriberUUID != "" && !reUUID.MatchString(b.SubscriberUUID) {
-		return echo.NewHTTPError(http.StatusBadRequest, app.i18n.T("globals.messages.invalidUUID"))
+	if b.Type != models.BounceTypeHard && b.Type != models.BounceTypeSoft {
+		return b, echo.NewHTTPError(http.StatusBadRequest, app.i18n.T("globals.messages.invalidData"))
 	}
 
-	return nil
+	return b, nil
 }

cmd/campaigns.go

@@ -15,7 +15,6 @@ import (
 
 	"github.com/gofrs/uuid"
 	"github.com/jmoiron/sqlx"
-	"github.com/knadh/listmonk/internal/subimporter"
 	"github.com/knadh/listmonk/models"
 	"github.com/labstack/echo"
 	"github.com/lib/pq"
@@ -687,7 +686,7 @@ func validateCampaignFields(c campaignReq, app *App) (campaignReq, error) {
 	if c.FromEmail == "" {
 		c.FromEmail = app.constants.FromEmail
 	} else if !regexFromAddress.Match([]byte(c.FromEmail)) {
-		if !subimporter.IsEmail(c.FromEmail) {
+		if _, err := app.importer.SanitizeEmail(c.FromEmail); err != nil {
 			return c, errors.New(app.i18n.T("campaigns.fieldInvalidFromEmail"))
 		}
 	}

cmd/init.go

@@ -61,6 +61,7 @@ type constants struct {
 		AllowExport        bool            `koanf:"allow_export"`
 		AllowWipe          bool            `koanf:"allow_wipe"`
 		Exportable         map[string]bool `koanf:"-"`
+		DomainBlocklist    map[string]bool `koanf:"-"`
 	} `koanf:"privacy"`
 	AdminUsername []byte `koanf:"admin_username"`
 	AdminPassword []byte `koanf:"admin_password"`
@@ -291,6 +292,7 @@ func initConstants() *constants {
 	c.Lang = ko.String("app.lang")
 	c.Privacy.Exportable = maps.StringSliceToLookupMap(ko.Strings("privacy.exportable"))
 	c.MediaProvider = ko.String("upload.provider")
+	c.Privacy.DomainBlocklist = maps.StringSliceToLookupMap(ko.Strings("privacy.domain_blocklist"))
 
 	// Static URLS.
 	// url.com/subscription/{campaign_uuid}/{subscriber_uuid}
@@ -366,6 +368,7 @@ func initCampaignManager(q *Queries, cs *constants, app *App) *manager.Manager {
 func initImporter(q *Queries, db *sqlx.DB, app *App) *subimporter.Importer {
 	return subimporter.New(
 		subimporter.Options{
+			DomainBlocklist:    app.constants.Privacy.DomainBlocklist,
 			UpsertStmt:         q.UpsertSubscriber.Stmt,
 			BlocklistStmt:      q.UpsertBlocklistSubscriber.Stmt,
 			UpdateListDateStmt: q.UpdateListsDate.Stmt,
@@ -373,7 +376,7 @@ func initImporter(q *Queries, db *sqlx.DB, app *App) *subimporter.Importer {
 				app.sendNotification(app.constants.NotifyEmails, subject, notifTplImport, data)
 				return nil
 			},
-		}, db.DB)
+		}, db.DB, app.i18n)
 }
 
 // initSMTPMessenger initializes the SMTP messenger.

cmd/public.go

@@ -318,15 +318,17 @@ func handleSubscriptionForm(c echo.Context) error {
 	}
 
 	// If there's no name, use the name bit from the e-mail.
-	req.Email = strings.ToLower(req.Email)
+	req.Name = strings.TrimSpace(req.Name)
 	if req.Name == "" {
 		req.Name = strings.Split(req.Email, "@")[0]
 	}
 
 	// Validate fields.
-	if err := subimporter.ValidateFields(req.SubReq); err != nil {
+	if r, err := app.importer.ValidateFields(req.SubReq); err != nil {
 		return c.Render(http.StatusInternalServerError, tplMessage,
 			makeMsgTpl(app.i18n.T("public.errorTitle"), "", err.Error()))
+	} else {
+		req.SubReq = r
 	}
 
 	// Insert the subscriber into the DB.

cmd/settings.go

@@ -39,6 +39,7 @@ type settings struct {
 	PrivacyAllowExport        bool     `json:"privacy.allow_export"`
 	PrivacyAllowWipe          bool     `json:"privacy.allow_wipe"`
 	PrivacyExportable         []string `json:"privacy.exportable"`
+	DomainBlocklist           []string `json:"privacy.domain_blocklist"`
 
 	UploadProvider             string `json:"upload.provider"`
 	UploadFilesystemUploadPath string `json:"upload.filesystem.upload_path"`
@@ -246,6 +247,16 @@ func handleUpdateSettings(c echo.Context) error {
 		set.SendgridKey = cur.SendgridKey
 	}
 
+	// Domain blocklist.
+	doms := make([]string, 0)
+	for _, d := range set.DomainBlocklist {
+		d = strings.TrimSpace(strings.ToLower(d))
+		if d != "" {
+			doms = append(doms, d)
+		}
+	}
+	set.DomainBlocklist = doms
+
 	// Marshal settings.
 	b, err := json.Marshal(set)
 	if err != nil {

cmd/subscribers.go

@@ -293,9 +293,12 @@ func handleCreateSubscriber(c echo.Context) error {
 	if err := c.Bind(&req); err != nil {
 		return err
 	}
-	req.Email = strings.ToLower(strings.TrimSpace(req.Email))
-	if err := subimporter.ValidateFields(req); err != nil {
+
+	r, err := app.importer.ValidateFields(req)
+	if err != nil {
 		return echo.NewHTTPError(http.StatusBadRequest, err.Error())
+	} else {
+		req = r
 	}
 
 	// Insert the subscriber into the DB.
@@ -325,9 +328,13 @@ func handleUpdateSubscriber(c echo.Context) error {
 	if id < 1 {
 		return echo.NewHTTPError(http.StatusBadRequest, app.i18n.T("globals.messages.invalidID"))
 	}
-	if req.Email != "" && !subimporter.IsEmail(req.Email) {
-		return echo.NewHTTPError(http.StatusBadRequest, app.i18n.T("subscribers.invalidEmail"))
+
+	if em, err := app.importer.SanitizeEmail(req.Email); err != nil {
+		return echo.NewHTTPError(http.StatusBadRequest, err.Error())
+	} else {
+		req.Email = em
 	}
+
 	if req.Name != "" && !strHasLen(req.Name, 1, stdInputMaxLen) {
 		return echo.NewHTTPError(http.StatusBadRequest, app.i18n.T("subscribers.invalidName"))
 	}

frontend/cypress/fixtures/subs-domain-blocklist.csv

@@ -0,0 +1,5 @@
+email,name,attributes
+noban1-import@mail.com,First0 Last0,"{""age"": 29, ""city"": ""Bangalore"", ""clientId"": ""DAXX79""}"
+ban1-import@BAN.net,First1 Last1,"{""age"": 43, ""city"": ""Bangalore"", ""clientId"": ""DAXX71""}"
+noban2-import1@mail.com,First2 Last2,"{""age"": 47, ""city"": ""Bangalore"", ""clientId"": ""DAXX70""}"
+ban2-import@ban.ORG,First1 Last1,"{""age"": 43, ""city"": ""Bangalore"", ""clientId"": ""DAXX71""}"

frontend/cypress/integration/subscribers.js

@@ -1,3 +1,5 @@
+const apiUrl = Cypress.env('apiUrl');
+
 describe('Subscribers', () => {
   it('Opens subscribers page', () => {
     cy.resetDB();
@@ -43,6 +45,7 @@ describe('Subscribers', () => {
     });
 
     cy.get('[data-cy=btn-query-reset]').click();
+    cy.wait(1000);
     cy.get('tbody td[data-label=Status]').its('length').should('eq', 2);
   });
 
@@ -55,7 +58,7 @@ describe('Subscribers', () => {
       { radio: 'check-list-remove', lists: [0, 1], rows: { 1: [] } },
       { radio: 'check-list-add', lists: [0, 1], rows: { 0: ['unsubscribed', 'unsubscribed'], 1: ['unconfirmed', 'unconfirmed'] } },
       { radio: 'check-list-remove', lists: [0], rows: { 0: ['unsubscribed'] } },
-      { radio: 'check-list-add', lists: [0], rows: { 0: ['unconfirmed', 'unsubscribed'] } },
+      { radio: 'check-list-add', lists: [0], rows: { 0: ['unsubscribed', 'unconfirmed'] } },
     ];
 
 
@@ -109,7 +112,7 @@ describe('Subscribers', () => {
 
     // Open the edit popup and edit the default lists.
     cy.get('[data-cy=btn-edit]').each(($el, n) => {
-      const email = `email-${n}@email.com`;
+      const email = `email-${n}@EMAIL.com`;
       const name = `name-${n}`;
 
       // Open the edit modal.
@@ -136,7 +139,7 @@ describe('Subscribers', () => {
     cy.wait(250);
     cy.get('tbody tr').each(($el) => {
       cy.wrap($el).find('td[data-id]').invoke('attr', 'data-id').then((id) => {
-        cy.wrap($el).find('td[data-label=E-mail]').contains(rows[id].email);
+        cy.wrap($el).find('td[data-label=E-mail]').contains(rows[id].email.toLowerCase());
         cy.wrap($el).find('td[data-label=Name]').contains(rows[id].name);
         cy.wrap($el).find('td[data-label=Status]').contains(rows[id].status, { matchCase: false });
 
@@ -171,7 +174,7 @@ describe('Subscribers', () => {
     // Cycle through each status and each list ID combination and create subscribers.
     const n = 0;
     for (let n = 0; n < 6; n++) {
-      const email = `email-${n}@email.com`;
+      const email = `email-${n}@EMAIL.com`;
       const name = `name-${n}`;
       const status = statuses[(n + 1) % statuses.length];
       const list = lists[(n + 1) % lists.length];
@@ -192,7 +195,7 @@ describe('Subscribers', () => {
       // which is always the first row in the table.
       cy.wait(250);
       const tr = cy.get('tbody tr:nth-child(1)').then(($el) => {
-        cy.wrap($el).find('td[data-label=E-mail]').contains(email);
+        cy.wrap($el).find('td[data-label=E-mail]').contains(email.toLowerCase());
         cy.wrap($el).find('td[data-label=Name]').contains(name);
         cy.wrap($el).find('td[data-label=Status]').contains(status, { matchCase: false });
         cy.wrap($el).find(`.tags .${status === 'enabled' ? 'unconfirmed' : 'unsubscribed'}`)
@@ -217,3 +220,104 @@ describe('Subscribers', () => {
     });
   });
 });
+
+
+describe('Domain blocklist', () => {
+  it('Opens settings page', () => {
+    cy.resetDB();
+  });
+
+  it('Add domains to blocklist', () => {
+    cy.loginAndVisit('/settings');
+    cy.get('.b-tabs nav a').eq(2).click();
+    cy.get('textarea[name="privacy.domain_blocklist"]').clear().type('ban.net\n\nBaN.OrG\n\nban.com\n\n');
+    cy.get('[data-cy=btn-save]').click();
+  });
+
+  it('Try subscribing via public page', () => {
+    cy.visit(`${apiUrl}/subscription/form`);
+    cy.get('input[name=email]').clear().type('test@noban.net');
+    cy.get('button[type=submit]').click();
+    cy.get('h2').contains('Subscribe');
+
+    cy.visit(`${apiUrl}/subscription/form`);
+    cy.get('input[name=email]').clear().type('test@ban.net');
+    cy.get('button[type=submit]').click();
+    cy.get('h2').contains('Error');
+  });
+
+
+  // Post to the admin API.
+  it('Try via admin API', () => {
+    cy.wait(1000);
+
+    // Add non-banned domain.
+    cy.request({
+      method: 'POST', url: `${apiUrl}/api/subscribers`, failOnStatusCode: true,
+      body: { email: 'test1@noban.net', 'name': 'test', 'lists': [1], 'status': 'enabled' }
+    }).should((response) => {
+      expect(response.status).to.equal(200);
+    });
+
+    // Add banned domain.
+    cy.request({
+      method: 'POST', url: `${apiUrl}/api/subscribers`, failOnStatusCode: false,
+      body: { email: 'test1@ban.com', 'name': 'test', 'lists': [1], 'status': 'enabled' }
+    }).should((response) => {
+      expect(response.status).to.equal(400);
+    });
+
+    // Modify an existinb subscriber to a banned domain.
+    cy.request({
+      method: 'PUT', url: `${apiUrl}/api/subscribers/1`, failOnStatusCode: false,
+      body: { email: 'test3@ban.org', 'name': 'test', 'lists': [1], 'status': 'enabled' }
+    }).should((response) => {
+      expect(response.status).to.equal(400);
+    });
+  });
+
+  it('Try via import', () => {
+    cy.loginAndVisit('/subscribers/import');
+    cy.get('.list-selector input').click();
+    cy.get('.list-selector .autocomplete a').first().click();
+
+    cy.fixture('subs-domain-blocklist.csv').then((data) => {
+      cy.get('input[type="file"]').attachFile({
+        fileContent: data.toString(),
+        fileName: 'subs.csv',
+        mimeType: 'text/csv',
+      });
+    });
+
+    cy.get('button.is-primary').click();
+    cy.get('section.wrap .has-text-success');
+    // cy.get('button.is-primary').click();
+    cy.get('.log-view').should('contain', 'ban1-import@BAN.net').and('contain', 'ban2-import@ban.ORG');
+    cy.wait(100);
+  });
+
+  it('Clear blocklist and try', () => {
+    cy.loginAndVisit('/settings');
+    cy.get('.b-tabs nav a').eq(2).click();
+    cy.get('textarea[name="privacy.domain_blocklist"]').clear();
+    cy.get('[data-cy=btn-save]').click();
+    cy.wait(1000);
+
+    // Add banned domain.
+    cy.request({
+      method: 'POST', url: `${apiUrl}/api/subscribers`, failOnStatusCode: true,
+      body: { email: 'test4@BAN.com', 'name': 'test', 'lists': [1], 'status': 'enabled' }
+    }).should((response) => {
+      expect(response.status).to.equal(200);
+    });
+
+    // Modify an existinb subscriber to a banned domain.
+    cy.request({
+      method: 'PUT', url: `${apiUrl}/api/subscribers/1`, failOnStatusCode: true,
+      body: { email: 'test4@BAN.org', 'name': 'test', 'lists': [1], 'status': 'enabled' }
+    }).should((response) => {
+      expect(response.status).to.equal(200);
+    });
+  });
+
+})

frontend/package.json

@@ -35,7 +35,7 @@
     "@vue/cli-service": "~4.5.13",
     "@vue/eslint-config-airbnb": "^5.3.0",
     "babel-eslint": "^10.1.0",
-    "cypress": "^6.4.0",
+    "cypress": "8.4.1",
     "cypress-file-upload": "^5.0.2",
     "eslint": "^7.27.0",
     "eslint-plugin-import": "^2.23.3",

frontend/src/views/Settings.vue

@@ -134,6 +134,9 @@ export default Vue.extend({
         }
       }
 
+      // Domain blocklist array from multi-line strings.
+      form['privacy.domain_blocklist'] = form['privacy.domain_blocklist'].split('\n').map((v) => v.trim().toLowerCase()).filter((v) => v !== '');
+
       this.isLoading = true;
       this.$api.updateSettings(form).then((data) => {
         if (data.needsRestart) {
@@ -192,6 +195,9 @@ export default Vue.extend({
         }
         d['bounce.sendgrid_key'] = dummyPassword;
 
+        // Domain blocklist array to multi-line string.
+        d['privacy.domain_blocklist'] = d['privacy.domain_blocklist'].join('\n');
+
         this.key += 1;
         this.form = d;
         this.formCopy = JSON.stringify(d);

frontend/src/views/Subscribers.vue

@@ -18,84 +18,86 @@
       </div>
     </header>
 
-    <section class="subscribers-controls columns">
-      <div class="column is-4">
-        <form @submit.prevent="onSubmit">
-          <div>
-            <b-field grouped>
-              <b-input @input="onSimpleQueryInput" v-model="queryInput"
-                :placeholder="$t('subscribers.queryPlaceholder')" icon="magnify" ref="query"
-                :disabled="isSearchAdvanced" data-cy="search"></b-input>
-              <b-button native-type="submit" type="is-primary" icon-left="magnify"
-                :disabled="isSearchAdvanced" data-cy="btn-search"></b-button>
-            </b-field>
+    <section class="subscribers-controls">
+      <div class="columns">
+        <div class="column is-6">
+          <form @submit.prevent="onSubmit">
+            <div>
+              <b-field grouped>
+                <b-input @input="onSimpleQueryInput" v-model="queryInput"
+                  :placeholder="$t('subscribers.queryPlaceholder')" icon="magnify" ref="query"
+                  :disabled="isSearchAdvanced" data-cy="search"></b-input>
+                <b-button native-type="submit" type="is-primary" icon-left="magnify"
+                  :disabled="isSearchAdvanced" data-cy="btn-search"></b-button>
+              </b-field>
 
+              <p>
+                <a href="#" @click.prevent="toggleAdvancedSearch" data-cy="btn-advanced-search">
+                  <b-icon icon="cog-outline" size="is-small" />
+                  {{ $t('subscribers.advancedQuery') }}
+                </a>
+              </p>
+
+              <div v-if="isSearchAdvanced">
+                <b-field>
+                  <b-input v-model="queryParams.queryExp"
+                    @keydown.native.enter="onAdvancedQueryEnter"
+                    type="textarea" ref="queryExp"
+                    placeholder="subscribers.name LIKE '%user%' or subscribers.status='blocklisted'"
+                    data-cy="query">
+                  </b-input>
+                </b-field>
+                <b-field>
+                  <span class="is-size-6 has-text-grey">
+                    {{ $t('subscribers.advancedQueryHelp') }}.{{ ' ' }}
+                    <a href="https://listmonk.app/docs/querying-and-segmentation"
+                      target="_blank" rel="noopener noreferrer">
+                      {{ $t('globals.buttons.learnMore') }}.
+                    </a>
+                  </span>
+                </b-field>
+
+                <div class="buttons">
+                  <b-button native-type="submit" type="is-primary"
+                    icon-left="magnify" data-cy="btn-query">{{ $t('subscribers.query') }}</b-button>
+                  <b-button @click.prevent="toggleAdvancedSearch" icon-left="cancel"
+                    data-cy="btn-query-reset">
+                    {{ $t('subscribers.reset') }}
+                  </b-button>
+                </div>
+              </div><!-- advanced query -->
+            </div>
+          </form>
+        </div><!-- search -->
+
+        <div class="column is-6 subscribers-bulk" v-if="bulk.checked.length > 0">
+          <div>
             <p>
-              <a href="#" @click.prevent="toggleAdvancedSearch" data-cy="btn-advanced-search">
-                <b-icon icon="cog-outline" size="is-small" />
-                {{ $t('subscribers.advancedQuery') }}
-              </a>
+              <span class="is-size-5 has-text-weight-semibold">
+                {{ $t('subscribers.numSelected', { num: numSelectedSubscribers }) }}
+              </span>
+              <span v-if="!bulk.all && subscribers.total > subscribers.perPage">
+                &mdash;
+                <a href="" @click.prevent="selectAllSubscribers">
+                  {{ $t('subscribers.selectAll', { num: subscribers.total }) }}
+                </a>
+              </span>
             </p>
 
-            <div v-if="isSearchAdvanced">
-              <b-field>
-                <b-input v-model="queryParams.queryExp"
-                  @keydown.native.enter="onAdvancedQueryEnter"
-                  type="textarea" ref="queryExp"
-                  placeholder="subscribers.name LIKE '%user%' or subscribers.status='blocklisted'"
-                  data-cy="query">
-                </b-input>
-              </b-field>
-              <b-field>
-                <span class="is-size-6 has-text-grey">
-                  {{ $t('subscribers.advancedQueryHelp') }}.{{ ' ' }}
-                  <a href="https://listmonk.app/docs/querying-and-segmentation"
-                    target="_blank" rel="noopener noreferrer">
-                    {{ $t('globals.buttons.learnMore') }}.
-                  </a>
-                </span>
-              </b-field>
-
-              <div class="buttons">
-                <b-button native-type="submit" type="is-primary"
-                  icon-left="magnify" data-cy="btn-query">{{ $t('subscribers.query') }}</b-button>
-                <b-button @click.prevent="toggleAdvancedSearch" icon-left="cancel"
-                  data-cy="btn-query-reset">
-                  {{ $t('subscribers.reset') }}
-                </b-button>
-              </div>
-            </div><!-- advanced query -->
-          </div>
-        </form>
-      </div><!-- search -->
-
-      <div class="column is-4 subscribers-bulk" v-if="bulk.checked.length > 0">
-        <div>
-          <p>
-            <span class="is-size-5 has-text-weight-semibold">
-              {{ $t('subscribers.numSelected', { num: numSelectedSubscribers }) }}
-            </span>
-            <span v-if="!bulk.all && subscribers.total > subscribers.perPage">
-              &mdash;
-              <a href="" @click.prevent="selectAllSubscribers">
-                {{ $t('subscribers.selectAll', { num: subscribers.total }) }}
+            <p class="actions">
+              <a href='' @click.prevent="showBulkListForm" data-cy="btn-manage-lists">
+                <b-icon icon="format-list-bulleted-square" size="is-small" /> Manage lists
               </a>
-            </span>
-          </p>
 
-          <p class="actions">
-            <a href='' @click.prevent="showBulkListForm" data-cy="btn-manage-lists">
-              <b-icon icon="format-list-bulleted-square" size="is-small" /> Manage lists
-            </a>
-
-            <a href='' @click.prevent="deleteSubscribers" data-cy="btn-delete-subscribers">
-              <b-icon icon="trash-can-outline" size="is-small" /> Delete
-            </a>
+              <a href='' @click.prevent="deleteSubscribers" data-cy="btn-delete-subscribers">
+                <b-icon icon="trash-can-outline" size="is-small" /> Delete
+              </a>
 
-            <a href='' @click.prevent="blocklistSubscribers" data-cy="btn-manage-blocklist">
-              <b-icon icon="account-off-outline" size="is-small" /> Blocklist
-            </a>
-          </p><!-- selection actions //-->
+              <a href='' @click.prevent="blocklistSubscribers" data-cy="btn-manage-blocklist">
+                <b-icon icon="account-off-outline" size="is-small" /> Blocklist
+              </a>
+            </p><!-- selection actions //-->
+          </div>
         </div>
       </div>
     </section><!-- control -->

frontend/src/views/settings/privacy.vue

@@ -29,6 +29,13 @@
       <b-switch v-model="data['privacy.allow_wipe']"
           name="privacy.allow_wipe" />
     </b-field>
+
+    <b-field :label="$t('settings.privacy.domainBlocklist')"
+      :message="$t('settings.privacy.domainBlocklistHelp')">
+      <b-input type="textarea"
+          v-model="data['privacy.domain_blocklist']"
+          name="privacy.domain_blocklist" />
+    </b-field>
   </div>
 </template>
 

i18n/cs-cz.json

@@ -409,6 +409,8 @@
     "settings.privacy.allowExportHelp": "Umožnit odběratelům exportovat shromážděná data?",
     "settings.privacy.allowWipe": "Umožnit vymazání",
     "settings.privacy.allowWipeHelp": "Umožnit odběratelům odstranit sebe včetně svých odběrů a všech ostatních dat z databáze. Pohledy na kampaně a klepnutí na odkazy se rovněž odeberou, zatímco pohledy a počty klepnutí se zachovají (aniž by měly přidruženého odběratele), takže statistiky a analýzy nebudou ovlivněny.",
+    "settings.privacy.domainBlocklist": "Domain blocklist",
+    "settings.privacy.domainBlocklistHelp": "E-mail addresses with these domains are disallowed from subscribing. Enter one domain per line, eg: somesite.com",
     "settings.privacy.individualSubTracking": "Sledování jednotlivých odběratelů",
     "settings.privacy.individualSubTrackingHelp": "Sledovat klepnutí a pohledy na kampaně na úrovni odběratelů. Je-li to zakázáno, sledování klepnutí a pohledů pokračuje, aniž by bylo propojeno s jednotlivými odběrateli.",
     "settings.privacy.listUnsubHeader": "Zahrnout záhlaví `List-Unsubscribe`",
@@ -434,6 +436,7 @@
     "subscribers.confirmBlocklist": "Blokovat {num} odběratelů?",
     "subscribers.confirmDelete": "Odstranit {num} odběratelů?",
     "subscribers.confirmExport": "Exportovat {num} odběratelů?",
+    "subscribers.domainBlocklisted": "The e-mail domain is blocklisted.",
     "subscribers.downloadData": "Stáhnout data",
     "subscribers.email": "E-mail",
     "subscribers.emailExists": "E-mail již existuje.",

i18n/de.json

@@ -409,6 +409,8 @@
     "settings.privacy.allowExportHelp": "Erlaube Abonnenten alle ihre Daten zu exportieren?",
     "settings.privacy.allowWipe": "Löschen aktivieren",
     "settings.privacy.allowWipeHelp": "Erlaube Abonnenten alle Daten, welche über sie gespeichert sind zu löschen. Dies beinhaltet auch Klicks und Anzeigen, verändert allerdings nicht die Gesamtzahl. Statistiken bleiben auch unverändert.",
+    "settings.privacy.domainBlocklist": "Domain blocklist",
+    "settings.privacy.domainBlocklistHelp": "E-mail addresses with these domains are disallowed from subscribing. Enter one domain per line, eg: somesite.com",
     "settings.privacy.individualSubTracking": "Einzelabonnenten Tracking",
     "settings.privacy.individualSubTrackingHelp": "Abonnentenviews und Klicks werden einzeln getrackt. Wenn deaktiviert, werden die Daten ohne Zuordnung zu Abonnenten gespeichert.",
     "settings.privacy.listUnsubHeader": "Inkludiere `List-Unsubscribe` (von Liste abmelden) Header",
@@ -434,6 +436,7 @@
     "subscribers.confirmBlocklist": "Blockiere {num} Abonnent(en)?",
     "subscribers.confirmDelete": "Lösche {num} Abonnent(en)?",
     "subscribers.confirmExport": "Exportiere {num} Abonnent(en)?",
+    "subscribers.domainBlocklisted": "The e-mail domain is blocklisted.",
     "subscribers.downloadData": "Daten herunterladen",
     "subscribers.email": "E-Mail",
     "subscribers.emailExists": "E-Mail existiert bereits.",

i18n/en.json

@@ -409,6 +409,8 @@
     "settings.privacy.allowExportHelp": "Allow subscribers to export data collected on them?",
     "settings.privacy.allowWipe": "Allow wiping",
     "settings.privacy.allowWipeHelp": "Allow subscribers to delete themselves including their subscriptions and all other data from the database. Campaign views and link clicks are also removed while views and click counts remain (with no subscriber associated to them) so that stats and analytics are not affected.",
+    "settings.privacy.domainBlocklist": "Domain blocklist",
+    "settings.privacy.domainBlocklistHelp": "E-mail addresses with these domains are disallowed from subscribing. Enter one domain per line, eg: somesite.com",
     "settings.privacy.individualSubTracking": "Individual subscriber tracking",
     "settings.privacy.individualSubTrackingHelp": "Track subscriber-level campaign views and clicks. When disabled, view and click tracking continue without being linked to individual subscribers.",
     "settings.privacy.listUnsubHeader": "Include `List-Unsubscribe` header",
@@ -434,6 +436,7 @@
     "subscribers.confirmBlocklist": "Blocklist {num} subscriber(s)?",
     "subscribers.confirmDelete": "Delete {num} subscriber(s)?",
     "subscribers.confirmExport": "Export {num} subscriber(s)?",
+    "subscribers.domainBlocklisted": "The e-mail domain is blocklisted.",
     "subscribers.downloadData": "Download data",
     "subscribers.email": "E-mail",
     "subscribers.emailExists": "E-mail already exists.",

i18n/es.json

@@ -409,6 +409,8 @@
     "settings.privacy.allowExportHelp": "¿Permitir a los subscriptores exportar los datos recabados de ellos?",
     "settings.privacy.allowWipe": "Permitir limpieza de datos",
     "settings.privacy.allowWipeHelp": "Permitir a los subscriptores eliminarse incluyendo sus subscripciones y todos sus datos de la base de datos. Las vistas de las campañas y los vínculos cliqueados también son eliminados mientras que las vistas y el conteo de clics se mantienen. (sin subscriptores asociados a ellos) de manera que las estadísticas y el análisis no se vea afectado.",
+    "settings.privacy.domainBlocklist": "Domain blocklist",
+    "settings.privacy.domainBlocklistHelp": "E-mail addresses with these domains are disallowed from subscribing. Enter one domain per line, eg: somesite.com",
     "settings.privacy.individualSubTracking": "Seguimiento de subscriptor inválido.",
     "settings.privacy.individualSubTrackingHelp": "Seguir a nivel de subscriptor las vistas y clics en una campaña. Cuando está deshabilitado, el seguimiento de vistas y clics continua sin ser asociado con subscriptores individuales.",
     "settings.privacy.listUnsubHeader": "Incluir el encabezado `Des-subscribirse` de la lista",
@@ -434,6 +436,7 @@
     "subscribers.confirmBlocklist": "Blocklist {num} subscriptor(es)?",
     "subscribers.confirmDelete": "Borrar {num} subscriptor(es)?",
     "subscribers.confirmExport": "Exportar {num} subscriptor(es)?",
+    "subscribers.domainBlocklisted": "The e-mail domain is blocklisted.",
     "subscribers.downloadData": "Descargar datos",
     "subscribers.email": "Correo electrónico",
     "subscribers.emailExists": "El correo electrónico ya existe.",

i18n/fr.json

@@ -409,6 +409,8 @@
     "settings.privacy.allowExportHelp": "Autoriser les abonné·es à exporter les données collectées à leur sujet ?",
     "settings.privacy.allowWipe": "Autoriser la suppression des données par les abonné·es",
     "settings.privacy.allowWipeHelp": "Autoriser les abonné·es à supprimer leurs abonnements et toutes les autres données de la base de données. Les vues de campagne et les clics sur les liens sont également supprimés, tandis que le compteur de vues et de nombre de clics globaux restent inchangés (aucun·e abonné·e ne leur est associé) afin que les statistiques et les analyses ne soient pas affectées.",
+    "settings.privacy.domainBlocklist": "Domain blocklist",
+    "settings.privacy.domainBlocklistHelp": "E-mail addresses with these domains are disallowed from subscribing. Enter one domain per line, eg: somesite.com",
     "settings.privacy.individualSubTracking": "Suivi individuel des abonné·es (vérifiez si la légalislation l'autorise)",
     "settings.privacy.individualSubTrackingHelp": "Suivez les vues et les clics par abonné·e pour les campagnes (vérifiez si la légalislation en vigueur l'autorise). Si l'option est désactivée, le suivi des vues et des clics s'effectue de façon anonyme.",
     "settings.privacy.listUnsubHeader": "Inclure l'en-tête de désabonnement simplifié (via certaines messageries)",
@@ -434,6 +436,7 @@
     "subscribers.confirmBlocklist": "Bloquer {num} abonné·e(s) ?",
     "subscribers.confirmDelete": "Supprimer {num} abonné·e(s) ?",
     "subscribers.confirmExport": "Exporter {num} abonné·e(s) ?",
+    "subscribers.domainBlocklisted": "The e-mail domain is blocklisted.",
     "subscribers.downloadData": "Télécharger les données",
     "subscribers.email": "Email",
     "subscribers.emailExists": "Cet email existe déjà.",

i18n/it.json

@@ -409,6 +409,8 @@
     "settings.privacy.allowExportHelp": "Autorizzi gli iscritti a esportare i dati raccolti su di loro?",
     "settings.privacy.allowWipe": "Autorizza la cancellazione",
     "settings.privacy.allowWipeHelp": "Autorizza gli iscritti a cancellare le loro iscrizioni e tutti gli altri dati dal database. Le visualizzazioni della campagna e i clic sui link verranno anch'essi cancellati, mentre i contatori globali delle visualizzazioni e del numero di clic restano invariati (nessun iscritto vi è associato) in modo che le statistiche non siano compromesse.",
+    "settings.privacy.domainBlocklist": "Domain blocklist",
+    "settings.privacy.domainBlocklistHelp": "E-mail addresses with these domains are disallowed from subscribing. Enter one domain per line, eg: somesite.com",
     "settings.privacy.individualSubTracking": "Follow-up individuale degli abbonati",
     "settings.privacy.individualSubTrackingHelp": "Monitora le visualizzazioni e i clic della campagna per iscritto. Quando è disabilitato, il follow-up delle visualizzazioni e dei clic, si effettua senza essere legato agli iscritti individuali.",
     "settings.privacy.listUnsubHeader": "Includere l'intestazione `List-Unsubscribe`",
@@ -434,6 +436,7 @@
     "subscribers.confirmBlocklist": "Lista di blocco {num} iscritto(i)?",
     "subscribers.confirmDelete": "Elimina {num} iscrittoi(i)?",
     "subscribers.confirmExport": "Esporta {num} iscritto(i)?",
+    "subscribers.domainBlocklisted": "The e-mail domain is blocklisted.",
     "subscribers.downloadData": "Scarica i dati",
     "subscribers.email": "Email",
     "subscribers.emailExists": "Email già esistente.",

i18n/ml.json

@@ -409,6 +409,8 @@
     "settings.privacy.allowExportHelp": "ഉപഭോക്കാക്കളിൽ നിന്നും ശേഖരിച്ച വിവരങ്ങൾ എക്സ്പോർട്ട് ചെയ്യാൻ അനുവദിക്കണോ?",
     "settings.privacy.allowWipe": "വിവരങ്ങൾ എന്നന്നേയ്ക്കുമായി ഇല്ലാതാക്കുന്നത് അനുവദിക്കുക",
     "settings.privacy.allowWipeHelp": "ഉപഭോക്താക്കളെ അവരുടെ വരിക്കാരായിട്ടുള്ള ലിസ്റ്റുകളും മറ്റു വിവരങ്ങളും ഡാറ്റാബേസിൽ നിന്നും ഇല്ലാതാക്കാൻ അനുവദിക്കുക.ക്യാമ്പെയ്ൻ കാഴ്ചകളും കണ്ണികളിന്മേലുള്ള ക്ലിക്കുകളുടെ വിവരങ്ങളും ഇല്ലാതാക്കുമെങ്കിലും കാഴ്ചകളുടെയും കണ്ണിയിലുള്ള ക്ലിക്കുകളുടെ (ഉപഭോക്തൃ വിവരങ്ങളില്ലാതെ) എണ്ണവും നിലനിൽക്കും. അതിനാൽ സ്ഥിതിവിവരക്കണക്കുകളെയും വിശകലനങ്ങളെയും ബാധിക്കില്ല.",
+    "settings.privacy.domainBlocklist": "Domain blocklist",
+    "settings.privacy.domainBlocklistHelp": "E-mail addresses with these domains are disallowed from subscribing. Enter one domain per line, eg: somesite.com",
     "settings.privacy.individualSubTracking": "വ്യക്തിഗത വരിക്കാരെ പിൻതുടരുക",
     "settings.privacy.individualSubTrackingHelp": "ഉപഭോക്തൃ തലത്തിലുള്ള ക്യാമ്പെയ്ൻ കാഴ്ചകളും കണ്ണിയിലെ ക്ലിക്കുകളും പിൻതുടരുക. അപ്രാപ്‌തമാക്കിയാൽ ക്യാമ്പെയ്ൻ കാഴ്ചകളും കണ്ണികളിന്മേലുള്ള ക്ലിക്കുകളുടെ വിവരങ്ങളും രേഖപ്പെടുത്തുമെങ്കുലും ഉപഭോക്താക്കളുടെ വിവരങ്ങളോട് ചേർക്കില്ല.",
     "settings.privacy.listUnsubHeader": "`List-Unsubscribe` തലക്കെട്ട് കൂട്ടിച്ചേർക്കുക",
@@ -434,6 +436,7 @@
     "subscribers.confirmBlocklist": "വരിക്കാരനെ തടയുന്ന പട്ടികയിൽ ചേർക്കട്ടേ? | {num} വരിക്കാരേ തടയുന്ന പട്ടികയിൽ ചേർക്കട്ടേ?",
     "subscribers.confirmDelete": "വരിക്കാരനെ ഇല്ലാതാക്കട്ടെ? | {num} വരിക്കാരേ ഇല്ലാതാക്കട്ടെ?",
     "subscribers.confirmExport": "വരിക്കാരനെ എക്സ്പോർട്ട് ചെയ്യട്ടേ? | {num} വരിക്കാരെ എക്സ്പോർട്ട് ചെയ്യട്ടേ?",
+    "subscribers.domainBlocklisted": "The e-mail domain is blocklisted.",
     "subscribers.downloadData": "ഡാറ്റ ഡൗൺലോഡുചെയ്യുക",
     "subscribers.email": "ഇ-മെയിൽ",
     "subscribers.emailExists": "ഇ-മെയിൽ നേരത്തേതന്നെ ഉള്ളതാണ്",

i18n/pl.json

@@ -409,6 +409,8 @@
     "settings.privacy.allowExportHelp": "Czy zezwolić subskrybentom na eksportowanie danych zebranych o nich?",
     "settings.privacy.allowWipe": "Zezwól na czyszczenie danych",
     "settings.privacy.allowWipeHelp": "Czy zezwolić subskrybentom na usuwanie ich samych razem z wszystkimi ich danymi? Wyświetlenia i liczba kliknięć zostaną zachowane, ale zostaną z nich usunięte informacje kto wykonał tę akcję.",
+    "settings.privacy.domainBlocklist": "Domain blocklist",
+    "settings.privacy.domainBlocklistHelp": "E-mail addresses with these domains are disallowed from subscribing. Enter one domain per line, eg: somesite.com",
     "settings.privacy.individualSubTracking": "Śledzenie indywidualnych subskrybentów",
     "settings.privacy.individualSubTrackingHelp": "Śledź dane wyświetleń i kliknięć na poziomie pojedynczego subskrybenta. Jeśli wyłączone dane będą nadal zbierane, ale niepowiązane ze subskrybentami.",
     "settings.privacy.listUnsubHeader": "Dodawaj nagłówek `List-Unsubscribe`",
@@ -434,6 +436,7 @@
     "subscribers.confirmBlocklist": "Czy zablokować {num} subskrybentów?",
     "subscribers.confirmDelete": "Usunąć {num} subskrybentów?",
     "subscribers.confirmExport": "Wyeksportować {num} subskrybentów?",
+    "subscribers.domainBlocklisted": "The e-mail domain is blocklisted.",
     "subscribers.downloadData": "Pobierz dane",
     "subscribers.email": "Email",
     "subscribers.emailExists": "Email już istnieje.",

i18n/pt-BR.json

@@ -409,6 +409,8 @@
     "settings.privacy.allowExportHelp": "Permitir que os assinantes exportem os dados coletados neles?",
     "settings.privacy.allowWipe": "Permitir limpeza",
     "settings.privacy.allowWipeHelp": "Permitir que os assinantes se excluam incluindo suas inscrições e todos os outros dados da base de dados. Visualizações da campanha e cliques de links também são removidos enquanto o total de visualizações e cliques permanecem (com nenhum inscrito associado a eles) para que as estatísticas e análises não sejam afetadas.",
+    "settings.privacy.domainBlocklist": "Domain blocklist",
+    "settings.privacy.domainBlocklistHelp": "E-mail addresses with these domains are disallowed from subscribing. Enter one domain per line, eg: somesite.com",
     "settings.privacy.individualSubTracking": "Rastreamento individual de inscrito",
     "settings.privacy.individualSubTrackingHelp": "Rastrear visualizações e cliques de cada inscrito. Quando desativado, o rastreio da visualizações e clique continuar sem estar associado a nenhuma inscrição.",
     "settings.privacy.listUnsubHeader": "Incluir cabeçalho `List-Unsubscribe`",
@@ -434,6 +436,7 @@
     "subscribers.confirmBlocklist": "Bloquear {num} inscrito(s)?",
     "subscribers.confirmDelete": "Excluir {num} inscrito(s)?",
     "subscribers.confirmExport": "Exportar {num} inscrito(s)?",
+    "subscribers.domainBlocklisted": "The e-mail domain is blocklisted.",
     "subscribers.downloadData": "Baixar dados",
     "subscribers.email": "E-mail",
     "subscribers.emailExists": "E-mail já existe.",

i18n/pt.json

@@ -409,6 +409,8 @@
     "settings.privacy.allowExportHelp": "Permitir aos subscritores exportar os dados coletados neles mesmos?",
     "settings.privacy.allowWipe": "Permitir eliminação de dados",
     "settings.privacy.allowWipeHelp": "Permitir aos subscritores eliminar todos os seus dados, incluindo as suas subscrições, da base de dados. Visualizações de campanhas e cliques em links também são removidos enquanto visualizações e contagem de clicks permanecem (sem nenhum subscritor associado) para que as estatísticas não sejam afetadas.",
+    "settings.privacy.domainBlocklist": "Domain blocklist",
+    "settings.privacy.domainBlocklistHelp": "E-mail addresses with these domains are disallowed from subscribing. Enter one domain per line, eg: somesite.com",
     "settings.privacy.individualSubTracking": "Tracking individual de subscritores",
     "settings.privacy.individualSubTrackingHelp": "Track visualizações e clicked ao nível do subscritor. Quando desligado, visualizações e track de clicks continuam, mas sem estarem associadas a nenhum subscritor.",
     "settings.privacy.listUnsubHeader": "Incluir header `List-Unsubscribe`",
@@ -434,6 +436,7 @@
     "subscribers.confirmBlocklist": "Adicionar {num} subscritor(es) à lista de bloqueio?",
     "subscribers.confirmDelete": "Eliminar {num} subscritor(es)?",
     "subscribers.confirmExport": "Exportar {num} subscritor(es)?",
+    "subscribers.domainBlocklisted": "The e-mail domain is blocklisted.",
     "subscribers.downloadData": "Descarregar dados",
     "subscribers.email": "E-mail",
     "subscribers.emailExists": "E-mail já existe.",

i18n/ru.json

@@ -409,6 +409,8 @@
     "settings.privacy.allowExportHelp": "Разрешить подписчикам экспортировать собранные на них данные?",
     "settings.privacy.allowWipe": "Разрешить удаление",
     "settings.privacy.allowWipeHelp": "Разрешить подписчикам удалять себя (включая их подписки и иные данные) из базы данных. Просмотры кампании и клики по ссылкам также удаляются, в то время как просмотры и счетчики кликов остаются (без привязанного к ним подписчика), так что это не влияет на статистику и аналитику.",
+    "settings.privacy.domainBlocklist": "Domain blocklist",
+    "settings.privacy.domainBlocklistHelp": "E-mail addresses with these domains are disallowed from subscribing. Enter one domain per line, eg: somesite.com",
     "settings.privacy.individualSubTracking": "Отслеживание каждого подписчика",
     "settings.privacy.individualSubTrackingHelp": "Отслеживать просмотры и клики на уровне каждого подписчика. Если отключено, просмотры и клики отслеживаются без привязки к конкретным подписчикам.",
     "settings.privacy.listUnsubHeader": "Включать заголовок `List-Unsubscribe`",
@@ -434,6 +436,7 @@
     "subscribers.confirmBlocklist": "Заблокировать {num} подписчика(ов)?",
     "subscribers.confirmDelete": "Удалить {num} подписчика(ов)?",
     "subscribers.confirmExport": "Экспортировать {num} подписчика(ов)?",
+    "subscribers.domainBlocklisted": "The e-mail domain is blocklisted.",
     "subscribers.downloadData": "Загрузить данные",
     "subscribers.email": "E-mail",
     "subscribers.emailExists": "E-mail существует.",

i18n/tr.json

@@ -409,6 +409,8 @@
     "settings.privacy.allowExportHelp": "Abonelerin üzerlerinde toplanan verileri dışa aktarmalarına izin verin?",
     "settings.privacy.allowWipe": "Silmek için izin ver",
     "settings.privacy.allowWipeHelp": "Abonelerin, abonelikleri ve veritabanındaki diğer tüm veriler dahil olmak üzere kendilerini silmesine izin verin. Kampanya görüntülemeleri ve bağlantı tıklamaları da, görünümler ve tıklama sayıları kalır (bunlarla ilişkilendirilmiş abone olmadan), böylece istatistikler ve analizler etkilenmez.",
+    "settings.privacy.domainBlocklist": "Domain blocklist",
+    "settings.privacy.domainBlocklistHelp": "E-mail addresses with these domains are disallowed from subscribing. Enter one domain per line, eg: somesite.com",
     "settings.privacy.individualSubTracking": "Bireysel üye takibi",
     "settings.privacy.individualSubTrackingHelp": "Abone düzeyinde kampanya görüntülemelerini ve tıklamalarını izleyin. Devre dışı bırakıldığında, bireysel abonelere bağlanmadan görüntüleme ve tıklama izleme devam eder.",
     "settings.privacy.listUnsubHeader": " `List-Unsubscribe` Başlık bilgisini ekle",
@@ -434,6 +436,7 @@
     "subscribers.confirmBlocklist": "Erişime engelli {num} üye(leri)?",
     "subscribers.confirmDelete": "Sil {num} üye(leri)?",
     "subscribers.confirmExport": "Dışa aktar {num} üye(leri)?",
+    "subscribers.domainBlocklisted": "The e-mail domain is blocklisted.",
     "subscribers.downloadData": "Veriyi indir",
     "subscribers.email": "E-posta",
     "subscribers.emailExists": "E-posta zaten mevcut.",

internal/migrations/v2.0.0.go

@@ -39,6 +39,7 @@ func V2_0_0(db *sqlx.DB, fs stuffbin.FileSystem, ko *koanf.Koanf) error {
 	if _, err := db.Exec(`
 		INSERT INTO settings (key, value) VALUES
 	    ('app.send_optin_confirmation', 'true'),
+	    ('privacy.domain_blocklist', '[]'),
 	    ('bounce.enabled', 'false'),
 	    ('bounce.webhooks_enabled', 'false'),
 	    ('bounce.count', '2'),

internal/subimporter/importer.go

@@ -24,6 +24,7 @@ import (
 	"sync"
 
 	"github.com/gofrs/uuid"
+	"github.com/knadh/listmonk/internal/i18n"
 	"github.com/knadh/listmonk/models"
 	"github.com/lib/pq"
 )
@@ -50,8 +51,9 @@ const (
 
 // Importer represents the bulk CSV subscriber import system.
 type Importer struct {
-	opt Options
-	db  *sql.DB
+	opt  Options
+	db   *sql.DB
+	i18n *i18n.I18n
 
 	stop   chan bool
 	status Status
@@ -64,6 +66,9 @@ type Options struct {
 	BlocklistStmt      *sql.Stmt
 	UpdateListDateStmt *sql.Stmt
 	NotifCB            models.AdminNotifCallback
+
+	// Lookup table for blocklisted domains.
+	DomainBlocklist map[string]bool
 }
 
 // Session represents a single import session.
@@ -123,12 +128,13 @@ var (
 )
 
 // New returns a new instance of Importer.
-func New(opt Options, db *sql.DB) *Importer {
+func New(opt Options, db *sql.DB, i *i18n.I18n) *Importer {
 	im := Importer{
 		opt:    opt,
-		stop:   make(chan bool, 1),
 		db:     db,
+		i18n:   i,
 		status: Status{Status: StatusNone, logBuf: bytes.NewBuffer(nil)},
+		stop:   make(chan bool, 1),
 	}
 	return &im
 }
@@ -518,11 +524,12 @@ func (s *Session) LoadCSV(srcPath string, delim rune) error {
 		}
 
 		sub := SubReq{}
-		// Lowercase to ensure uniqueness in the DB.
-		sub.Email = strings.ToLower(strings.TrimSpace(row["email"]))
+		sub.Email = row["email"]
 		sub.Name = row["name"]
-		if err := ValidateFields(sub); err != nil {
-			s.log.Printf("skipping line %d: %v", i, err)
+
+		sub, err = s.im.ValidateFields(sub)
+		if err != nil {
+			s.log.Printf("skipping line %d: %s: %v", i, sub.Email, err)
 			continue
 		}
 
@@ -564,6 +571,51 @@ func (im *Importer) Stop() {
 	}
 }
 
+// ValidateFields validates incoming subscriber field values and returns sanitized fields.
+func (im *Importer) ValidateFields(s SubReq) (SubReq, error) {
+	if len(s.Email) > 1000 {
+		return s, errors.New(im.i18n.T("subscribers.invalidEmail"))
+	}
+
+	s.Name = strings.TrimSpace(s.Name)
+	if len(s.Name) == 0 || len(s.Name) > stdInputMaxLen {
+		return s, errors.New(im.i18n.T("subscribers.invalidName"))
+	}
+
+	em, err := im.SanitizeEmail(s.Email)
+	if err != nil {
+		return s, err
+	}
+	s.Email = em
+
+	return s, nil
+}
+
+// SanitizeEmail validates and sanitizes an e-mail string and returns the lowercased,
+// e-mail component of an e-mail string.
+func (im *Importer) SanitizeEmail(email string) (string, error) {
+	email = strings.ToLower(strings.TrimSpace(email))
+
+	// Since `mail.ParseAddress` parses an email address which can also contain optional name component
+	// here we check if incoming email string is same as the parsed email.Address. So this eliminates
+	// any valid email address with name and also valid address with empty name like `<abc@example.com>`.
+	em, err := mail.ParseAddress(email)
+	if err != nil || em.Address != email {
+		return "", errors.New(im.i18n.T("subscribers.invalidEmail"))
+	}
+
+	// Check if the e-mail's domain is blocklisted.
+	d := strings.Split(em.Address, "@")
+	if len(d) == 2 {
+		_, ok := im.opt.DomainBlocklist[d[1]]
+		if ok {
+			return "", errors.New(im.i18n.T("subscribers.domainBlocklisted"))
+		}
+	}
+
+	return em.Address, nil
+}
+
 // mapCSVHeaders takes a list of headers obtained from a CSV file, a map of known headers,
 // and returns a new map with each of the headers in the known map mapped by the position (0-n)
 // in the given CSV list.
@@ -584,20 +636,6 @@ func (s *Session) mapCSVHeaders(csvHdrs []string, knownHdrs map[string]bool) map
 	return hdrKeys
 }
 
-// ValidateFields validates incoming subscriber field values.
-func ValidateFields(s SubReq) error {
-	if len(s.Email) > 1000 {
-		return errors.New(`e-mail too long`)
-	}
-	if !IsEmail(s.Email) {
-		return errors.New(`invalid e-mail "` + s.Email + `"`)
-	}
-	if len(s.Name) == 0 || len(s.Name) > stdInputMaxLen {
-		return errors.New(`invalid or empty name "` + s.Name + `"`)
-	}
-	return nil
-}
-
 // countLines counts the number of line breaks in a file. This does not
 // distinguish between "blank" and non "blank" lines.
 // Credit: https://stackoverflow.com/a/24563853
@@ -621,14 +659,3 @@ func countLines(r io.Reader) (int, error) {
 		}
 	}
 }
-
-// IsEmail checks whether the given string is a valid e-mail address.
-func IsEmail(email string) bool {
-	// Since `mail.ParseAddress` parses an email address which can also contain optional name component
-	// here we check if incoming email string is same as the parsed email.Address. So this eliminates
-	// any valid email address with name and also valid address with empty name like `<abc@example.com>`.
-	if em, err := mail.ParseAddress(email); err != nil || em.Address != email {
-		return false
-	}
-	return true
-}

schema.sql

@@ -193,6 +193,7 @@ INSERT INTO settings (key, value) VALUES
     ('privacy.allow_export', 'true'),
     ('privacy.allow_wipe', 'true'),
     ('privacy.exportable', '["profile", "subscriptions", "campaign_views", "link_clicks"]'),
+    ('privacy.domain_blocklist', '[]'),
     ('upload.provider', '"filesystem"'),
     ('upload.filesystem.upload_path', '"uploads"'),
     ('upload.filesystem.upload_uri', '"/uploads"'),