#21733: password prompt in luci accepting incomplete password
--------------------------------+------------------------
  Reporter:  brennangalletly@…  |      Owner:  developers
      Type:  defect             |     Status:  closed
  Priority:  normal             |  Milestone:
 Component:  packages           |    Version:  Trunk
Resolution:  worksforme         |   Keywords:  password
--------------------------------+------------------------
Changes (by jow):

 * status:  new => closed
 * resolution:   => worksforme


Comment:

 Cannot reproduce this at all.

 {{{
 $ curl 'https://192.168.1.1/cgi-bin/luci/' -s -o /dev/null -w
 "%{http_code}" -k -H 'Content-Type: application/x-www-form-urlencoded'
 --data 'luci_username=root&luci_password=example34'
 403
 $ curl 'https://192.168.1.1/cgi-bin/luci/' -s -o /dev/null -w
 "%{http_code}" -k -H 'Content-Type: application/x-www-form-urlencoded'
 --data 'luci_username=root&luci_password=foo'
 403
 $ curl 'https://192.168.1.1/cgi-bin/luci/' -s -o /dev/null -w
 "%{http_code}" -k -H 'Content-Type: application/x-www-form-urlencoded'
 --data 'luci_username=root&luci_password=example'
 403
 $ curl 'https://192.168.1.1/cgi-bin/luci/' -s -o /dev/null -w
 "%{http_code}" -k -H 'Content-Type: application/x-www-form-urlencoded'
 --data 'luci_username=root&luci_password=example34'
 403
 $ curl 'https://192.168.1.1/cgi-bin/luci/' -s -o /dev/null -w
 "%{http_code}" -k -H 'Content-Type: application/x-www-form-urlencoded'
 --data 'luci_username=root&luci_password=example34@@'
 302
 }}}

--
Ticket URL: <https://dev.openwrt.org/ticket/21733#comment:1>
OpenWrt <http://openwrt.org>
Opensource Wireless Router Technology
_______________________________________________
openwrt-tickets mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-tickets

Reply via email to