ACP2E-4528: Customer address city validation mishandles forward slashes and invalid characters such as !, ", #, and ?

The ACP2E-4528 patch fixes the issue where customer address city validation incorrectly allowed invalid characters such as !, ", #, and ?, while properly supporting the forward slash (/). This patch is available when the Quality Patches Tool (QPT) 1.1.78 is installed. The patch ID is ACP2E-4528. Please note that this issue is scheduled to be fixed in Adobe Commerce 2.4.9.

Affected products and versions

The patch is created for Adobe Commerce version:

  • Adobe Commerce (all deployment methods) 2.4.8-p3

Compatible with Adobe Commerce versions:

  • Adobe Commerce (all deployment methods) 2.4.8 - 2.4.8-p4
NOTE
The patch might become applicable to other versions with new Quality Patches Tool releases. To check if the patch is compatible with your Adobe Commerce version, update the magento/quality-patches package to the latest version and check the compatibility on the Quality Patches Tool: Search for patches page. Use the patch ID as a search keyword to locate the patch.

Issue

City validation in customer addresses incorrectly allows invalid characters such as !, ", #, and ?, while handling forward slash (/) incorrectly, allowing invalid city names to be saved.

Steps to reproduce:

  1. Log in to the Storefront as a registered customer.
  2. Navigate to My Account > Address Book.
  3. Click Add New Address or edit an existing address.
  4. In the City field, enter PARGAS-5xx!"#?!x.
  5. Save the address.

Expected results:

A validation error should appear: Invalid City. Please use letters, numbers, spaces, and the following characters: - _ ' ’ . , & ( ) /.

Actual results:

It is possible to save a city name containing invalid characters such as !, ", #, and ?.

Apply the patch

To apply individual patches, use the following links depending on your deployment method:

To learn more about Quality Patches Tool, refer to:

recommendation-more-help
commerce-operations-help-tools