Skip to content
Snippets Groups Projects
Commit 05037e0b authored by Torben Hansen's avatar Torben Hansen Committed by Oliver Bartsch
Browse files

[TASK] Prevent password policy warning in BackendUserPasswordCheck

The dataHandler hook implementation `BackendUserPasswordCheck` sets
a random password for a new backend user, if the provided password
is empty in `$incomingFieldArray`. The generated password is a
random HMAC string, which does not fulfill the requirements of
the default TYPO3 password policy. As a result, a password policy
warning is shown.

This change ensures, that the generated random password at least
fulfills the default TYPO3 password policy.

Resolves: #103138
Releases: main, 12.4
Change-Id: I20ef7c5958d539533cc76ca41c4cc7b5ab07e594
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/82986


Tested-by: default avatarcore-ci <typo3@b13.com>
Tested-by: default avatarOliver Bartsch <bo@cedev.de>
Reviewed-by: default avatarOliver Bartsch <bo@cedev.de>
parent 2feda602
No related merge requests found
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment