feat: only allow address [a-z0-9] (#347)

worker/src/mails_api/index.ts

@@ -38,9 +38,10 @@ api.delete('/api/mails/:id', async (c) => {
     }
     const { address } = c.get("jwtPayload")
     const { id } = c.req.param();
+    // TODO: add toLowerCase() to handle old data
     const { success } = await c.env.DB.prepare(
         `DELETE FROM raw_mails WHERE address = ? and id = ? `
-    ).bind(address, id).run();
+    ).bind(address.toLowerCase(), id).run();
     return c.json({
         success: success
     })