White space as password passed the validation

Created on 21 August 2020, almost 4 years ago
Updated 9 April 2024, 3 months ago

Problem/Motivation

If a user change own password to whitespace only, regardless how many whitespace in the new password. The password validation will be passed, even there are some errors said the check failed in the policy details table.
After saving the change, there is a message said 'The changes have been saved'. The password actually hasn't been changed since Drupal won't consider a whitespace only password as the valid password for a user.

Steps to reproduce

  1. Go to user edit page (/user/{UID}/edit)
  2. In the Password field, type in ' '
  3. in the Confirm password field, type in ' '
  4. Click the Save button

Proposed resolution

Return an error message said 'The password does not satisfy the password policies.'

Remaining tasks

N/A

User interface changes

N/A

API changes

N/A

Data model changes

N/A

πŸ› Bug report
Status

Closed: won't fix

Component

Code

Created by

πŸ‡¦πŸ‡ΊAustralia Mingsong πŸ‡¦πŸ‡Ί

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • πŸ‡ΊπŸ‡ΈUnited States Kristen Pol Santa Cruz, CA, USA

    Thanks to everyone for your work on this issue.

    As the 8.x is no longer supported, I'm postponing this issue for now and need feedback as to whether or not this issue is relevant to 4.0.x.

    If it is, please reopen and change the version and make sure the issue summary is clear and complete. If it's not, please closed as "won't fix".

    If there is no response to this in a month addressing the above, it can be closed as "won't fix".

  • Status changed to Closed: won't fix 3 months ago
  • πŸ‡¦πŸ‡ΊAustralia Mingsong πŸ‡¦πŸ‡Ί

    Thanks for looking into it.

    It has been 4 years, no others interested in this change. So close it for now.

  • πŸ‡ΊπŸ‡ΈUnited States Kristen Pol Santa Cruz, CA, USA

    Thanks for updating πŸ‘

Production build 0.69.0 2024