This is an automated email from the ASF dual-hosted git repository.
thelabdude pushed a commit to branch branch_9x
in repository https://gitbox.apache.org/repos/asf/solr.git
The following commit(s) were added to refs/heads/branch_9x by this push:
new b987169 SOLR-16022: Enforce special character requirements on
passwords with length less than 15 (#741) (#742)
b987169 is described below
commit b987169695209e01925d1a8c38f263bcffae2474
Author: Timothy Potter <[email protected]>
AuthorDate: Fri Mar 11 09:32:50 2022 -0700
SOLR-16022: Enforce special character requirements on passwords with length
less than 15 (#741) (#742)
---
solr/CHANGES.txt | 2 ++
solr/webapp/web/js/angular/controllers/security.js | 4 ++--
2 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/solr/CHANGES.txt b/solr/CHANGES.txt
index b07e942..4cf494a 100644
--- a/solr/CHANGES.txt
+++ b/solr/CHANGES.txt
@@ -691,6 +691,8 @@ Bug Fixes
* SOLR-16009: Force Calcite's Rel simplify config flag to false to avoid
erasing filters that are meaningful to Solr,
but look like nonsense to Calcite, such as AND'd filters on the same
multi-valued field (Timothy Potter, Kiran Chitturi)
+* SOLR-16022: Enforce special character requirements on passwords with length
less than 15 (Timothy Potter)
+
================== 8.11.1 ==================
Bug Fixes
diff --git a/solr/webapp/web/js/angular/controllers/security.js
b/solr/webapp/web/js/angular/controllers/security.js
index 6c7223d..d1b0991 100644
--- a/solr/webapp/web/js/angular/controllers/security.js
+++ b/solr/webapp/web/js/angular/controllers/security.js
@@ -412,8 +412,8 @@ solrAdminApp.controller('SecurityController', function
($scope, $timeout, $cooki
return false;
}
- if (!password.match(strongPasswordRegex)) {
- $scope.validationError = "Password not strong enough! Must contain at
least one lowercase letter, one uppercase letter, one digit, and one of these
special characters: !@#$%^&*_-[]()";
+ if (password.length < 15 && !password.match(strongPasswordRegex)) {
+ $scope.validationError = "Password not strong enough! Must have length
>= 15 or contain at least one lowercase letter, one uppercase letter, one
digit, and one of these special characters: !@#$%^&*_-[]()";
return false;
}
