[Koha-bugs] [Bug 10177] Koha Accepts Seven "Space" Characters as a Valid Password

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10177

--- Comment #6 from Chris Cormack <chris at bigballofwax.co.nz> ---
(In reply to Marc Véron from comment #5)
> I did not test, but I compared with Bug 13441 and I think this patch should
> behave the same way resulting in a message like "The password entered
> contains whitespace characters. Please remove any whitespace characters."
> 
> With other words: There should be no whitespace characters accepted at all
> (or at least no leading and/or trailing whitespace characters).
> 
> Test in Bug 13441 is:
> match(/\s/)
> 
> Test in this patch is:
> match(/^\s*$/)

I disagree, whitespace in passwords is totally valid, a strong password is a
phrase.

However having a password that is entirely whitespace (which is what we are
testing) is not a strong password.

This patch will allow you to have whitespace in your password, but you must
have other characters also.

-- 
You are receiving this mail because:
You are watching all bug changes.