Ticket #26624 (assigned)
Registration page allows silently passwords greater than 32 chars
|Reported by:||amiguete||Owned by:||ctsai|
|Keywords:||ENGR NF-4566 DIR P2||Cc:|
When I registered an account I set up a password of 64 chars. The registration was successful.
After that, the login page only allowed me to enter 32 chars (no specific warnings about the length, though) so I had to use the "lost password recovery" feature to add a new password.
This was supposedly fixed in ticket #10372 but maybe they just trimmed the password silently (no warnings).