Uploaded image for project: 'Hippo CMS'
  1. Hippo CMS
  2. CMS-9602

Password validation rules not working

    XMLWordPrintable

Details

    Description

      Not all password validation rules are correct handled.

      Reproduction path:

      • Download archetype 3.0.1
      • Change cms version to 3.0.1
      • Verify in the console the password validation service configuration [1]
      • Log in as admin
      • Click on change password
      • Change the password to '0123'
        Result: password is accepted
        Expected result: password is rejected based on the password validation rules.

      The validation rule for password length is working.

      [1] Documentation: http://www.onehippo.org/library/concepts/security/configure-password-safety-validation-and-password-expiration.html
      Default a lot of validators are configured, e.g. 'containsCapitalValidator'

      Attachments

        Activity

          People

            pgupta Pankaj Gupta (Inactive)
            kvanderweijden Koen van der Weijden (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: