Function ValidateDomain

internal/agent/api.go:1553–1555

validateDomain runs the IDNA "Lookup" profile against a user-supplied domain string. Lookup is the strictest of the four IDNA profiles and is what DNS resolvers themselves apply when converting a name into a wire-format query — it rejects whitespace, control characters, invalid label combinations, a

(domain string)

// instead of replicating the security-relevant parsing. Returns the
// normalized (Punycode) form.
func ValidateDomain(domain string) (string, error) {
	return validateDomain(domain)
}

func validateDomain(domain string) (string, error) {
	if domain == "" {