SECURITY: email domain whitelist could be bypassed

lib/validators/email_validator.rb

@@ -22,7 +22,7 @@ class EmailValidator < ActiveModel::EachValidator
 
   def self.email_in_restriction_setting?(setting, value)
     domains = setting.gsub('.', '\.')
-    regexp = Regexp.new("@(.+\\.)?(#{domains})", true)
+    regexp = Regexp.new("@(.+\\.)?(#{domains})$", true)
     value =~ regexp
   end