#32163: Admin change password is not handled gracefully (error 500)
----------------------------------+--------------------------------------
     Reporter:  Romain SOMMERARD  |                    Owner:  nobody
         Type:  Bug               |                   Status:  new
    Component:  contrib.admin     |                  Version:  3.1
     Severity:  Normal            |               Resolution:
     Keywords:  admin, password   |             Triage Stage:  Unreviewed
    Has patch:  0                 |      Needs documentation:  0
  Needs tests:  0                 |  Patch needs improvement:  0
Easy pickings:  0                 |                    UI/UX:  0
----------------------------------+--------------------------------------

Comment (by slogan621):

 So, a quick google search indicates that the "*" is probably being
 interpreted as a regex wildcard. And two in a row is probably invalid,
 leading to the exception being raised.

 What happens if you escape the '*' characters, e.g.,  use querty123\*\*\*
 instead of querty*** ? I'm expecting that doing so would allow for the use
 of "*' in a password (or trigger some other filtering/error that might be
 in place that disallows use of "*").

-- 
Ticket URL: <https://code.djangoproject.com/ticket/32163#comment:1>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/068.b573a12442ff7b33bb3d64c0ec5423d8%40djangoproject.com.

Reply via email to