-
-
Notifications
You must be signed in to change notification settings - Fork 2
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improve password-checking regex #279
Conversation
Now that we've verified that only the three symbols &, +, and % cause problems in passwords submitted through Chorus, we can loosen the password rules to allow any character except those three.
Converted to draft since I just saw this part of #255:
I tested the Chorus "Login" button but not a full Send/Receive. I'll add a full Send/Receive to my tests to determine whether other characters besides &, % and + might cause further issues. |
Can't confirm Tim's experience that the password |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks so much for doing the researching and finishing this up!
I just think the error message should be a bit shorter
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I still find the error message a bit odd.
"can cause problems" sounds more like "You can use them if you want, but something bad might happen somewhere".
From our perspective we don't allow these characters because they break S/R.
From a user perspective, they're just not allowed. If we want an explination (which I don't think is absolutely necessary, we could say something like "for backwards compatibility purposes") 🤷
Now that we've verified that only the three symbols &, +, and % cause problems in passwords submitted through Chorus, we can loosen the password rules to allow any character except those three.
Fixes #255.