My 2 cent: I have each password input checked against a regular expression
(which is in the config). Thus, I can adapt this easily as password rules get
updated. Should I try to submit this as a patch? What actually would be needed
as well in the config (did no do this yet) is an explanation of
Le 08/08/2016 à 17:05, Matthieu Imbert a écrit :
Hello,
Hi,
Currently, there is no validation mechanism for user passwords, except
checking that they are at least 6 characters long. This allows very
weak passwords to be used, this can be a security issue.
In the master branch, password m