Currently we can create accounts with ANY password. Hopefully mediawiki has flags that can require stronger passwords.
Description
Description
Details
Details
Subject | Repo | Branch | Lines +/- | |
---|---|---|---|---|
Set minimum password length of 10 for wikitech. | operations/mediawiki-config | master | +9 -5 |
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Resolved | None | T14884 Login and account creation should be by secure http. | |||
Invalid | None | T11816 Improve security for Special:Userlogin (tracking) | |||
Resolved | Andrew | T118751 Add password requirements for wikitech accounts |
Event Timeline
Comment Actions
And the current requirements generally for WMF wikis are much the same as the defaults
and
https://github.com/wikimedia/mediawiki/blob/453d886/includes/DefaultSettings.php#L4338-L4388
Comment Actions
Change 253366 had a related patch set uploaded (by Andrew Bogott):
Set minimum password length of 8 for wikitech.
Comment Actions
It would also be nice if strong passwords worked at all: T58114: Can't reset password on wikitech (Unicode passwords not accepted), due to LDAP/opendj?