Jacques1

Type checks of custom salt too permissive

4

Why is `null` or a boolean a valid salt? Sure, it will be caught later by the length check, but that's only because those values happen to have a string...

Several issues with custom salt

1

If the custom salt contains a character which isn't a valid bcrypt Base64 digit, the library will silently encode the salt. This is a huge problem. If the salt is...