zxcvbn-ts / zxcvbn

Low-Budget Password Strength Estimation
https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/wheeler
MIT License
858 stars 68 forks source link

fix(l33t): make sure all full subs use levenshtein #245

Closed alanpoulain closed 8 months ago

alanpoulain commented 9 months ago

Not only the first entry is a full substitution.

This PR fixes this bug and also changes a little the helper in getCleanPasswords to be clearer (the next recursive index corresponds to the current index + the substitution length instead of i + 1, which corresponds to the same value but is not clear).