The blacklist constraint disallows passwords that are the same as any of the passwords in the blacklist, neglecting case. Would like to add an option to also disallow any passwords that contain blacklisted passwords.

Example:
"password" is a bad password an administrator might want to disallow. However, "password123" is also a bad password that the administrator might want to disallow. By enabling an option to disallow any passwords containing the blacklisted password "password", he or she could disallow both bad passwords.

Comments

aohrvetpv’s picture

Status: Active » Needs review
StatusFileSize
new4.42 KB
aohrvetpv’s picture

StatusFileSize
new4.42 KB

End checkbox title with period for consistency with checkbox of username constraint.

Not sure what is more conventional for checkboxes in Drupal.

aohrvetpv’s picture

StatusFileSize
new4.43 KB

Pluralize to "substrings".

aohrvetpv’s picture

StatusFileSize
new4.43 KB

Fix typo in comment.

  • AohRveTPV committed 6ce9708 on 7.x-2.x
    Issue #2466301 by AohRveTPV: Option to disallow passwords containing...
aohrvetpv’s picture

Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.