django-zxcvbn-password icon indicating copy to clipboard operation
django-zxcvbn-password copied to clipboard

Stop using client-side validation javascript code

Open pawamoy opened this issue 5 years ago • 0 comments

To avoid discrepancies between the client-side and server-side validation, we should get rid of the client-side validation using javascript. Instead, we should simply send a request upon password field modification to validate the current input against the server. The view handling the request would return the warnings and feedback. Client-side HTML page would only display the progress bar.

This would also allow validation against custom dictionaries on the client side, not only server one.

See https://github.com/pawamoy/django-zxcvbn-password/pull/95#issuecomment-566068735

pawamoy avatar Dec 16 '19 14:12 pawamoy