Subdomains bypass validation

[stri8ed]

Its possible to bypass the validation by using subdomains of the disposable domains. e.g.

[email protected]
[email protected]

The root domains are blocked, but the validation logic does not detect these, since it checks the entire domain as single string.

I am seeing cases of people abusing this in the wild. I assume the disposable providers offer dynamic subdomains as an option.

[Propaganistas]

Validation is performed similarly to what disposable/disposable offers for JS:
See https://github.com/disposable/disposable/blob/7c19066bc3765767d5427f6da8334a3e70687f82/disposable.js#L11-L12

But I'm open for a PR with tests providing a configuration option for that.