• Username@feddit.de
    link
    fedilink
    English
    arrow-up
    16
    arrow-down
    1
    ·
    8 months ago

    Stripping characters from passwords, great idea! Right up there with truncating passwords that are too long.

    • viking
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      6
      ·
      8 months ago

      deleted by creator

      • Username@feddit.de
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        1
        ·
        8 months ago

        That’s not how any of this works.

        First of all, stripping passwords is never okay. You can reject the password and let the user choose a new one, but never just modify it on your own.

        Then, if your system is at risk of code injection by certain characters in user input, please just shut it down and never turn it on again.