Details
-
Bug
-
Status: Closed
-
Top
-
Resolution: Won't Do
-
3.0.1
-
None
-
0
-
Tiger Sprint 117
Description
Not all password validation rules are correct handled.
Reproduction path:
- Download archetype 3.0.1
- Change cms version to 3.0.1
- Verify in the console the password validation service configuration [1]
- Log in as admin
- Click on change password
- Change the password to '0123'
Result: password is accepted
Expected result: password is rejected based on the password validation rules.
The validation rule for password length is working.
[1] Documentation: http://www.onehippo.org/library/concepts/security/configure-password-safety-validation-and-password-expiration.html
Default a lot of validators are configured, e.g. 'containsCapitalValidator'