Password strength validation alert does not display what is missing

[hzalaz]

To reproduce just use fair strength and only meet the length requirement and you get: