Skip to content

Commit

Permalink
[5.2] Password Strength Symbols (#43484)
Browse files Browse the repository at this point in the history
* [5.2] Password Strength Symbols

The script used to check for symbols in a password contains a limited set of symbols.

This PR updates the script to use the list of special characters provided by [OWASP](https://owasp.org/www-community/password-special-characters). They are the punctuation characters that are present on standard US keyboard.

* final

* cs

Co-authored-by: Quy <quy@nomonkeybiz.com>
  • Loading branch information
brianteeman and Quy authored May 22, 2024
1 parent c171626 commit 1548e30
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion build/media_source/system/js/fields/passwordstrength.es6.js
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@
*
* Copyright (c) 2014 Thomas Kjærgaard
*
* ADAPTED BY: Joomla for use in the Joomla! CMS
*
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to deal
* in the Software without restriction, including without limitation the rights
Expand Down Expand Up @@ -50,7 +52,7 @@ class PasswordStrength {
// eslint-disable-next-line no-useless-escape
score += this.constructor.calc(
value,
/[@$!#?=;:*\-_€%&()`´]/g,
/[@$!#?=;:*\-_€%&()`´+[\]{}'"\\|,.<>/~^]/g,
this.special,
mods,
);
Expand Down

0 comments on commit 1548e30

Please sign in to comment.