Branch: refs/heads/master
Home:
https://github.com/tribe29/checkmk
Commit: 4e5cc2e56dd46429b09808f81c890a5a15aa776f
https://github.com/tribe29/checkmk/commit/4e5cc2e56dd46429b09808f81c890a5a1…
Author: Hannes Rantzsch <hannes.rantzsch(a)tribe29.com>
Date: 2022-11-23 (Wed, 23 Nov 2022)
Changed paths:
A .werks/14392
M cmk/gui/http.py
M cmk/gui/wato/pages/user_profile/change_password.py
M cmk/gui/wato/pages/users.py
A tests/gui_e2e/test_change_password.py
M tests/testlib/playwright/helpers.py
Log Message:
-----------
14392 FIX Consistently handle white-space in passwords
Previously it was not possible to set user passwords starting with or
ending on white-space characters in the Edit Users UI. This is now
possible.
White-space characters at be beginning or end of passwords were stripped
in the Edit Users interface. For example, the password "insecure example
" would have been accepted by the interface, but modified to "insecure
example". As a result, users might have ended up with a different
password than they expected and been unable to log in.
White-spaces in passwords are now no longer stripped, so the password
"insecure example " can be set and used.
Note that the user's Change Password interface, reachable via the User
Profile section, was not affected by this and has already allowed
passwords starting with or ending on white-space characters.
Change-Id: I93a597641c47afa9b4170e9789736a5c1d0633c9