search

SCCapstone / EZBag

2 stars 0 forks source link

Password can be the same as business name/email #197

Closed Matthewjre closed 3 years ago

Matthewjre commented 3 years ago

To keep security at a priority, it might be beneficial to put in some validators that disallow the user to set their password to something too similar to any of their other information (business name or email) EZBag_Issue_SS

cjshearer commented 3 years ago

It would probably be pretty easy to check for this on the frontend using the v-text-form rules props.

cjshearer commented 3 years ago

We've decided not to pursue this. If somebody wants a bad password, they will find a way to make a bad password. We could add more strict requirements for the password (maybe require an uppercase, number, symbol, etc.), but that tends to make passwords weaker, not stronger.