The blacklist constraint disallows passwords that are the same as any of the passwords in the blacklist, neglecting case. Would like to add an option to also disallow any passwords that contain blacklisted passwords.

Example:
"password" is a bad password an administrator might want to disallow. However, "password123" is also a bad password that the administrator might want to disallow. By enabling an option to disallow any passwords containing the blacklisted password "password", he or she could disallow both bad passwords.

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

AohRveTPV’s picture

Status: Active » Needs review
FileSize
4.42 KB
AohRveTPV’s picture

End checkbox title with period for consistency with checkbox of username constraint.

Not sure what is more conventional for checkboxes in Drupal.

AohRveTPV’s picture

Pluralize to "substrings".

AohRveTPV’s picture

Fix typo in comment.

  • AohRveTPV committed 6ce9708 on 7.x-2.x
    Issue #2466301 by AohRveTPV: Option to disallow passwords containing...
AohRveTPV’s picture

Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.