laravel-zxcvbn

laravel-zxcvbn copied to clipboard

'xcvbn_dictionary' test fails on any pattern match, not just by username or password

2

Referencing this block of code in the 'xcvbn_dictionary' test: https://github.com/olssonm/laravel-zxcvbn/blob/7032f908204d7e524a251e7e5f324c479b81acbe/src/ZxcvbnServiceProvider.php#L53-L58 This will fail on ANY sequence match. So suppose the password includes pattern similar to one of the dictionary words,...

GregPeden