New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Improve password policy handling on login #159

Open

2 tasks

LukasReschke opened this issue Apr 26, 2021 · 1 comment

Labels

Projects

Member

LukasReschke commented Apr 26, 2021 •

edited

Document existing state (we do only check the policy on password changes)
Consider performing the password policy check also on login time

Reference https://hackerone.com/reports/1169335

LukasReschke added the security label

LukasReschke added this to Backlog in Security

Member

nickvergessen commented Apr 27, 2021

Should only be reported if the user backend allows the user to change their password.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment