I'm not 100% sure cause I have dev-lang/php[filter] turned on, but the proof is: 1) https://github.com/owncloud/core/issues/2905#issuecomment-16463503 2) grep filter_var settings/ajax/lostpassword.php if( isset( $_POST['email'] ) && filter_var( $_POST['email'], FILTER_VALIDATE_EMAIL) ) {
Another nice catch in these php USE flags, thanks! Fixed in all current ebuilds