Amy Nguyen Jan 04

Massive Drupal Password Fix: Zxcvbn Upgrade! - OpenSIPS Trunking Solutions

Overview

This release is feature and score compatible with the upstream zxcvbn js release 4. 4. 2. Read also: This Simple Trick Stops Sour Noodle Leaks—Guaranteed!

Jan 31, 2020 · a short term fix is to update composer. json to pin at 0. 4. 0. Read also: FakeHub The Wish Makers: Your Questions Answered (Finally!)

Oct 21, 2022 · dependency zxcvbn has a 1. 3. 0 release that supports php 8. 1, but password strength has a locked dependency on zxcvbn 0. 4. 0.

This happens to be the one thing blocking.

Feb 7, 2022 · fix cases where email 2fa would not be forced enabled on the first login request after a password is discovered as compromised;

Rename various options to be better.

Nov 15, 2018 · helps with php 7. 2 compatibility.

Version 0. 3. 0 doesn't even bump the php requirements (works with 5. 3).

To make sure it loaded properly, open in a browser and type zxcvbn('tr0ub4dour&3') into the console.

To pull in updates and bug fixes:

Zxcvbn works identically on the server.

Jul 1, 2020 · here's a patch to require version 0. 4. 0.

You can also require the old version manually into your project:

In my opinion would.