Exit code 1 then pass.validate password contains chars like ^

[andreyponteleev]

Exit code 1 occured while validating passwords with special chars (-^[{) inside

[andreyponteleev]

cmd = spawn('openssl', ['passwd', '-' + type, '-salt', salt, '-stdin']);
cmd.stdin.end(password);

this will prevent from crash openssl while "-" sign is 1st in password

also impossible to run any XSS, because no user input passed to spawn & shell

[andris9]

Would you mind creating a Pull Request?

[andreyponteleev]

On next week I can do it, if needed

[kanalasumant]

This is just the library I needed. Thanks @andris9 for this. I wanted to ask you if this issue is taken care of or should we not use pass.validate at all and assume they were hashed correctly or use other
encryption methods. I'd be using this for a production application so any input on this would be helpful.