Merge pull request #2048 from scireum/feature/fha/SE-14149-Security

SE-14149: Fixes client side password checks.
scireum · Nov 25, 2024 · 359caef · 359caef
2 parents 752ce97 + bec35fa
commit 359caef
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/main/resources/default/templates/biz/password/change-password-script.html.pasta b/src/main/resources/default/templates/biz/password/change-password-script.html.pasta
@@ -84,11 +84,11 @@
                 return false;
             }
 
-            if (settings.requireLettersAndDigits && !/\d/.test(password) && !/[a-zA-Z]/.test(password)) {
+            if (settings.requireLettersAndDigits && (!/\d/.test(password) || !/[a-zA-Z]/.test(password))) {
                 return false;
             }
 
-            if (settings.requireUpperAndLowerCase && !/[a-z]/.test(password) && !/[A-Z]/.test(password)) {
+            if (settings.requireUpperAndLowerCase && (!/[a-z]/.test(password) || !/[A-Z]/.test(password))) {
                 return false;
             }