password_exposed

password_exposed copied to clipboard

Run $lines through array_filter() to remove empty strings that can cause unhandled exceptions

2

In some cases, the response body pulled from the HaveIBeenPwned API can end with a blank space after the final new line characters. When pulled into the `$lines` array, this...

jamieb-tillo

Empty string in $line causes an Exception that can expose a User's password

1

In this method, if the `$line` variable does not contain a colon (e.g., is an empty string), then the call to `list()` will throw an Exception. https://github.com/DivineOmega/password_exposed/blob/327f93ee5cab54622077bcae721412b55be16720/src/AbstractPasswordExposedChecker.php#L147 This exception is...

jamieb-tillo

please bump old psr/cache deps

3

hi, cant install as a dependemcy from `divineomega/laravel-password-exposed-validation-rule` : ``` Running composer update langleyfoxall/laravel-nist-password-rules Loading composer repositories with package information Updating dependencies Your requirements could not be resolved to an...

simonbuehler

fix phpdocs

1

staabm

We had a user in production get a strange error today which seems to originate from this package: ``` rename(/home/sites/15a/5/564543e965/production/releases/161/vendor/divineomega/password_exposed/src/../bundles/ca-certs.json,/home/sites/15a/5/564543e965/production/releases/161/vendor/divineomega/password_exposed/src/../bundles/ca-certs-backup-20210915192000.json): No such file or directory ``` Its only happened once...

Jamesking56