jvm-tech / JvMTECH.NeosHardening

Harden request headers, login interface and passwords to increase backend security.
MIT License
3 stars 1 forks source link

Required password length is not taken from settings #1

Closed Benjamin-K closed 2 years ago

Benjamin-K commented 2 years ago

Hey, nice package. I've already searched for a package to set the password strength for a while (see also neos/flow-development-collection#2662).

One little thing i found when checking the code: The required password length is currently hardcoded (See /Classes/Service/UserServiceAspect.php#L57). This should be changed to reflect the option defined in Settings.yaml.

sbruggmann commented 2 years ago

Thanks for reporting :pray: