Skip to content

[Bug]: No feedback if the password for sharing does not comply with rules #797

@jeffrson

Description

@jeffrson

⚠️ This issue respects the following points: ⚠️

Bug description

[Disclaimer: I did my best to search for a similar report indeed]

I want to protect a shared link with a password. The dialog seems to accept any password, however there is no password protection at all if the password is too simple (ie, does not comply with rules set) or is among the most compromised passwords. There is a message in browser console:

Das Passwort ist unter den 1.000.000 häufigsten Passwörtern. Bitte wählen Sie ein anderes. Das Passwort muss mindestens 10 Zeichen lang sein. Das Passwort muss mindestens einen Klein- und einen Großbuchstaben beinhalten. Das Passwort ist in der Liste der kompromittierten Passwörter enthalten. Bitte wählen Sie ein anderes Passwort."

Steps to reproduce

  1. Add share link to folder or file
  2. Choose "password"
  3. Set simple password ("abcd1234")
  4. Test link in incognito/private mode

Expected behavior

  • Should ask for password (simple may be enough) when opening the link
    or
  • Should alert the user that password is invalid and not applied when creating the link

Nextcloud Server version

30

Operating system

Debian/Ubuntu

PHP engine version

None

Web server

None

Database engine version

None

Is this bug present after an update or on a fresh install?

None

Are you using the Nextcloud Server Encryption module?

None

What user-backends are you using?

  • Default user-backend (database)
  • LDAP/ Active Directory
  • SSO - SAML
  • Other

Configuration report

List of activated Apps

Nextcloud Signing status

Nextcloud Logs

Additional info

Using Nextcloud-AIO

Metadata

Metadata

Assignees

No one assigned

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions