This is an automated email from the ASF dual-hosted git repository.
thelabdude pushed a commit to branch branch_9_0
in repository https://gitbox.apache.org/repos/asf/solr.git
The following commit(s) were added to refs/heads/branch_9_0 by this push:
new 4377962 SOLR-16022: Enforce special character requirements on
passwords with length less than 15 (#741) (#742) (#743)
4377962 is described below
commit 4377962eee0a98c534ca34b249db7c88faa5ef71
Author: Timothy Potter <[email protected]>
AuthorDate: Fri Mar 11 10:08:24 2022 -0700
SOLR-16022: Enforce special character requirements on passwords with length
less than 15 (#741) (#742) (#743)
---
solr/CHANGES.txt | 2 ++
solr/webapp/web/js/angular/controllers/security.js | 4 ++--
2 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/solr/CHANGES.txt b/solr/CHANGES.txt
index 90fd96c..04df4c8 100644
--- a/solr/CHANGES.txt
+++ b/solr/CHANGES.txt
@@ -636,6 +636,8 @@ Bug Fixes
* SOLR-16009: Force Calcite's Rel simplify config flag to false to avoid
erasing filters that are meaningful to Solr,
but look like nonsense to Calcite, such as AND'd filters on the same
multi-valued field (Timothy Potter, Kiran Chitturi)
+* SOLR-16022: Enforce special character requirements on passwords with length
less than 15 (Timothy Potter)
+
================== 8.11.1 ==================
Bug Fixes
diff --git a/solr/webapp/web/js/angular/controllers/security.js
b/solr/webapp/web/js/angular/controllers/security.js
index c95469c..0386bae 100644
--- a/solr/webapp/web/js/angular/controllers/security.js
+++ b/solr/webapp/web/js/angular/controllers/security.js
@@ -412,8 +412,8 @@ solrAdminApp.controller('SecurityController', function
($scope, $timeout, $cooki
return false;
}
- if (!password.match(strongPasswordRegex)) {
- $scope.validationError = "Password not strong enough! Must contain at
least one lowercase letter, one uppercase letter, one digit, and one of these
special characters: !@#$%^&*_-[]()";
+ if (password.length < 15 && !password.match(strongPasswordRegex)) {
+ $scope.validationError = "Password not strong enough! Must have length
>= 15 or contain at least one lowercase letter, one uppercase letter, one
digit, and one of these special characters: !@#$%^&*_-[]()";
return false;
}
