add password rules quirk for kiehls.com

[Shoudong-Zhu]

Overall Checklist

• [ ] I agree to the project's Developer Certificate of Origin
• [ ] The top-level JSON objects are sorted alphabetically
• [ ] There are no open pull requests for the same update

for password-rules.json

• [ ] The given rule isn't particularly standard and obvious for password managers
• [ ] Generated passwords have been tested from this rule using the Password Rules Validation Tool
• [ ] Information has been included about the website's requirements (eg. screenshots, error messages, steps during experimentation, etc.)
• [ ] The PR isn't documenting something that would be a common practice among password managers (e.g. minimal length of 6)

I tested these special characters, and none of them are applicable to this website: [^*_+=`|(){}[:;"'<>], but these did work: [!#$%&?@]

Screenshot showing rules:

[rmondello]

Hi @amalgopal2015! How did you come up with that list of special characters? Did the website list them, or did you try experimentally?

[amalgopal2015]

Hi @amalgopal2015! How did you come up with that list of special characters? Did the website list them, or did you try experimentally?