[GH-ISSUE #1853] The initial password UI check doesn't work correctly #8792

Closed
opened 2026-04-30 04:50:12 -05:00 by GiteaMirror · 2 comments
Owner

Originally created by @ghost on GitHub (Nov 12, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/1853

Originally assigned to: @miloschwartz on GitHub.

Describe the Bug

When new admin account should be created, there is password check for all the necessities.

I'm using KeePassXC and have this allowed:

Image

Yet I'm getting this check result:

Image

Did check the string and it does have all characters necessary as well.

Yet the special char must be switched off - and after this I'm adding manually one special and one number to pretty long password.

This happened to me for each installation so far.

Environment

  • Pangolin Version: 1.12.2

To Reproduce

Just standard installation.

Expected Behavior

Should let me pass.

Originally created by @ghost on GitHub (Nov 12, 2025). Original GitHub issue: https://github.com/fosrl/pangolin/issues/1853 Originally assigned to: @miloschwartz on GitHub. ### Describe the Bug When new admin account should be created, there is password check for all the necessities. I'm using KeePassXC and have this allowed: <img width="365" height="53" alt="Image" src="https://github.com/user-attachments/assets/bf081afd-fd63-4592-9967-e9a79f09db42" /> Yet I'm getting this check result: <img width="398" height="174" alt="Image" src="https://github.com/user-attachments/assets/81a14bee-62eb-43fb-8893-4da9af5b0a27" /> Did check the string and it does have all characters necessary as well. Yet the special char must be switched off - and after this I'm adding manually one special and one number to pretty long password. This happened to me for each installation so far. ### Environment - Pangolin Version: 1.12.2 ### To Reproduce Just standard installation. ### Expected Behavior Should let me pass.
GiteaMirror added the enhancement label 2026-04-30 04:50:12 -05:00
Author
Owner

@Pallavikumarimdb commented on GitHub (Nov 13, 2025):

The issue happens because KeePassXC includes some extended ASCII or Unicode symbols (like ¢, §, or ½) that pangolin password validator doesn’t currently recognize as valid special characters. The regex only allows a limited ASCII set: [~!`@#$%^&*()_-+={}[]|\:;"'<>,./?]

@oschwartz10612 , The current password validator rejects strong passwords containing extended ASCII or Unicode symbols (like § or µ). Should we update the regex to a Unicode-aware version to support all valid special characters while keeping the same strength rules?

<!-- gh-comment-id:3528948438 --> @Pallavikumarimdb commented on GitHub (Nov 13, 2025): The issue happens because KeePassXC includes some extended ASCII or Unicode symbols (like `¢`, `§`, or `½`) that pangolin password validator doesn’t currently recognize as valid special characters. The regex only allows a limited ASCII set: [~!`@#$%^&*()_\-+={}[\]|\\:;"'<>,.\/?] @oschwartz10612 , The current password validator rejects strong passwords containing extended ASCII or Unicode symbols (like § or µ). Should we update the regex to a Unicode-aware version to support all valid special characters while keeping the same strength rules?
Author
Owner

@miloschwartz commented on GitHub (Dec 3, 2025):

Closing as not planned because we only plan to support standard ASCII symbols and not all unicode symbols

<!-- gh-comment-id:3608882650 --> @miloschwartz commented on GitHub (Dec 3, 2025): Closing as not planned because we only plan to support standard ASCII symbols and not all unicode symbols
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#8792