![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
Opened 5 years ago
Last modified 4 years ago
#53339 new defect (bug)
Inconsistency in allowed characters for a password
| Reported by: | henry.wright | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | Awaiting Review |
| Component: | Users | Version: | |
| Severity: | normal | Keywords: | |
| Cc: | Focuses: |
Description
When a user attempts to reset his or her password using the facility on the front-end, they are able to use the \ character in their new password.
When a user attempts to change their password at wp-admin > Users > Profile, they aren't able to use the \ character in their password.
This feels like an inconsistency.
Further, I noticed whitespace is stripped from the beginning and end of the password string when using the change password facility at wp-admin > Users > Profile. Note trim() isn't used in the password reset facility on the front-end.
Note:
See TracTickets
for help on using tickets.
Related #35500