Open mfal opened 3 months ago
The HIBP URL should be configurable, due use own hosted/proxied HIBP checks, because submitting IPs to HIBP must be agreed by the user.
https://github.com/mittwald/password-tools-js/blob/main/src/rule/hibp/declaration.ts#L3
I think it would enough to add a "Custom Callback Policy" so you're free to choose what implementation you would like to offer.
The HIBP URL should be configurable, due use own hosted/proxied HIBP checks, because submitting IPs to HIBP must be agreed by the user.
https://github.com/mittwald/password-tools-js/blob/main/src/rule/hibp/declaration.ts#L3