Show the blacklisted terms that are substrings of the password

Created on 14 January 2025, 8 days ago

With the password_policy_blacklist module is enabled and a Password Blacklist constraint, when the user enters a password that contains a blacklisted term, the failure message displayed is "There are restricted terms in your password. Please modify your password."

In the case where "Also disallow passwords containing blacklisted passwords" is enabled for the constraint, it may not be obvious to the user which part of the password is a problem.

Could we add an option to show the restricted terms? I'm thinking basically the same thing that AohRveTPV [proposed]( https://www.drupal.org/project/password_policy/issues/1603210#comment-99... β†’ ) a while ago:

  • Indicate only the blacklisted passwords that the user has entered.
  • Have this indication be an option which is off by default.

Attached is a patch with a prototype that shows one of the terms (maybe one is sufficient?). It is not yet conditional on a setting.

✨ Feature request
Status

Active

Version

4.0

Component

User interface

Created by

πŸ‡ΊπŸ‡ΈUnited States jlstrecker Athens, Ohio, USA

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024