This is an automated email from the ASF dual-hosted git repository.
thelabdude pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/solr.git
The following commit(s) were added to refs/heads/main by this push:
new 07424ed SOLR-16022: Enforce special character requirements on
passwords with length less than 15 (#741)
07424ed is described below
commit 07424ed1c59ca69a69d27dfd92790b325a13d86c
Author: Timothy Potter <[email protected]>
AuthorDate: Fri Mar 11 08:35:57 2022 -0700
SOLR-16022: Enforce special character requirements on passwords with length
less than 15 (#741)
---
solr/CHANGES.txt | 2 ++
solr/webapp/web/js/angular/controllers/security.js | 4 ++--
2 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/solr/CHANGES.txt b/solr/CHANGES.txt
index 8f8f393..cf7bc78 100644
--- a/solr/CHANGES.txt
+++ b/solr/CHANGES.txt
@@ -719,6 +719,8 @@ Bug Fixes
* SOLR-16009: Force Calcite's Rel simplify config flag to false to avoid
erasing filters that are meaningful to Solr,
but look like nonsense to Calcite, such as AND'd filters on the same
multi-valued field (Timothy Potter, Kiran Chitturi)
+* SOLR-16022: Enforce special character requirements on passwords with length
less than 15 (Timothy Potter)
+
================== 8.11.1 ==================
Bug Fixes
diff --git a/solr/webapp/web/js/angular/controllers/security.js
b/solr/webapp/web/js/angular/controllers/security.js
index 6c7223d..d1b0991 100644
--- a/solr/webapp/web/js/angular/controllers/security.js
+++ b/solr/webapp/web/js/angular/controllers/security.js
@@ -412,8 +412,8 @@ solrAdminApp.controller('SecurityController', function
($scope, $timeout, $cooki
return false;
}
- if (!password.match(strongPasswordRegex)) {
- $scope.validationError = "Password not strong enough! Must contain at
least one lowercase letter, one uppercase letter, one digit, and one of these
special characters: !@#$%^&*_-[]()";
+ if (password.length < 15 && !password.match(strongPasswordRegex)) {
+ $scope.validationError = "Password not strong enough! Must have length
>= 15 or contain at least one lowercase letter, one uppercase letter, one
digit, and one of these special characters: !@#$%^&*_-[]()";
return false;
}
