MIN_PASSWORD_LENGTH ignored when changing the password in user settings #1301

Closed
opened 2025-11-02 03:56:04 -06:00 by GiteaMirror · 1 comment
Owner

Originally created by @jhasse on GitHub (Nov 30, 2017).

  • Gitea version (or commit ref): 1.2.3
  • Database (use [x]):
    • PostgreSQL
    • MySQL
    • MSSQL
    • SQLite
  • Can you reproduce the bug at https://try.gitea.io:
    • Yes
    • No
    • Not relevant

Description

The MIN_PASSWORD_LENGTH configuration added in #223 is only checked when signing up or when resetting the password via email. When changing the password in the settings (e.g. https://try.gitea.io/user/settings/security) one can enter a password with any length.

Originally created by @jhasse on GitHub (Nov 30, 2017). - Gitea version (or commit ref): 1.2.3 - Database (use `[x]`): - [ ] PostgreSQL - [x] MySQL - [ ] MSSQL - [ ] SQLite - Can you reproduce the bug at https://try.gitea.io: - [x] Yes - [ ] No - [ ] Not relevant ## Description The `MIN_PASSWORD_LENGTH` configuration added in #223 is only checked when signing up or when resetting the password via email. When changing the password in the settings (e.g. https://try.gitea.io/user/settings/security) one can enter a password with any length.
GiteaMirror added the type/bug label 2025-11-02 03:56:04 -06:00
Author
Owner

@jhasse commented on GitHub (Dec 5, 2017):

Wow that was pretty fast. Thank you very much :)

@jhasse commented on GitHub (Dec 5, 2017): Wow that was pretty fast. Thank you very much :)
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#1301