From cd6baefc4e7a69d348fca34a88c0508b2dafed3d Mon Sep 17 00:00:00 2001 From: BrianTeeman Date: Fri, 17 May 2024 23:43:42 +0100 Subject: [PATCH 1/3] [5.2] Password Strength Symbols The script used to check for symbols in a password contains a limited set of symbols. This PR updates the script to use the list of special characters provided by [OWASP](https://owasp.org/www-community/password-special-characters). They are the punctuation characters that are present on standard US keyboard. --- build/media_source/system/js/fields/passwordstrength.es6.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build/media_source/system/js/fields/passwordstrength.es6.js b/build/media_source/system/js/fields/passwordstrength.es6.js index 1ca7f259f6bec..dee60aa576a17 100644 --- a/build/media_source/system/js/fields/passwordstrength.es6.js +++ b/build/media_source/system/js/fields/passwordstrength.es6.js @@ -50,7 +50,7 @@ class PasswordStrength { // eslint-disable-next-line no-useless-escape score += this.constructor.calc( value, - /[@$!#?=;:*\-_€%&()`´]/g, + /[!@#$%^&*()_+\-=\[\]{};':"\\|,.<>\/?~]/g, this.special, mods, ); From 388d8e3709dd4c66c23a0e23a4719950fba1561c Mon Sep 17 00:00:00 2001 From: BrianTeeman Date: Sat, 18 May 2024 00:25:24 +0100 Subject: [PATCH 2/3] final --- build/media_source/system/js/fields/passwordstrength.es6.js | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/build/media_source/system/js/fields/passwordstrength.es6.js b/build/media_source/system/js/fields/passwordstrength.es6.js index dee60aa576a17..c5fd165932d08 100644 --- a/build/media_source/system/js/fields/passwordstrength.es6.js +++ b/build/media_source/system/js/fields/passwordstrength.es6.js @@ -7,6 +7,8 @@ * * Copyright (c) 2014 Thomas Kjærgaard * + * ADAPTED BY: Joomla for use in the Joomla! CMS + * * Permission is hereby granted, free of charge, to any person obtaining a copy * of this software and associated documentation files (the "Software"), to deal * in the Software without restriction, including without limitation the rights @@ -50,7 +52,7 @@ class PasswordStrength { // eslint-disable-next-line no-useless-escape score += this.constructor.calc( value, - /[!@#$%^&*()_+\-=\[\]{};':"\\|,.<>\/?~]/g, + /[@$!#?=;:*\-_€%&()`´+\[\]{}'"\\|,.<>\/~^]/g, this.special, mods, ); From 2836081680aea8e092e767a09c4fa52c3ad81c3b Mon Sep 17 00:00:00 2001 From: Quy Date: Tue, 21 May 2024 08:38:59 -0700 Subject: [PATCH 3/3] cs --- build/media_source/system/js/fields/passwordstrength.es6.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build/media_source/system/js/fields/passwordstrength.es6.js b/build/media_source/system/js/fields/passwordstrength.es6.js index f3bf100f7cde8..eaf00d14401fc 100644 --- a/build/media_source/system/js/fields/passwordstrength.es6.js +++ b/build/media_source/system/js/fields/passwordstrength.es6.js @@ -52,7 +52,7 @@ class PasswordStrength { // eslint-disable-next-line no-useless-escape score += this.constructor.calc( value, - /[@$!#?=;:*\-_€%&()`´+\[\]{}'"\\|,.<>\/~^]/g, + /[@$!#?=;:*\-_€%&()`´+[\]{}'"\\|,.<>/~^]/g, this.special, mods, );