Unverified Commit 13b4572a authored by Birte Kristina Friesel's avatar Birte Kristina Friesel
Browse files

limit password length to 10000 characters 

that should be sufficient…
parent e2e33de7

lib/Travelynx.pm

+1 −1
Original line number Diff line number Diff line
@@ -36,7 +36,7 @@ use XML::LibXML; 
sub check_password {

	my ( $password, $hash ) = @_;



	if ( bcrypt( $password, $hash ) eq $hash ) {

	if ( bcrypt( substr( $password, 0, 10000 ), $hash ) eq $hash ) {

		return 1;

	}

	return 0;

lib/Travelynx/Controller/Account.pm

+1 −1
Original line number Diff line number Diff line
@@ -13,7 +13,7 @@ sub hash_password { 
	my @salt_bytes = map { int( rand(255) ) + 1 } ( 1 .. 16 );

	my $salt       = en_base64( pack( 'C[16]', @salt_bytes ) );



	return bcrypt( $password, '$2a$12$' . $salt );

	return bcrypt( substr( $password, 0, 10000 ), '$2a$12$' . $salt );

}



sub make_token {

templates/change_password.html.ep

+2 −2
Original line number Diff line number Diff line
@@ -15,12 +15,12 @@ 
	<div class="row">

		<div class="input-field col l6 m12 s12">

			<i class="material-icons prefix">lock</i>

			%= password_field 'newpw', id => 'password', class => 'validate', required => undef, minlength => 8, autocomplete => 'new-password'

			%= password_field 'newpw', id => 'password', class => 'validate', required => undef, minlength => 8, maxlength => 10000, autocomplete => 'new-password'

			<label for="password">Neues Passwort</label>

		</div>

		<div class="input-field col l6 m12 s12">

			<i class="material-icons prefix">lock</i>

			%= password_field 'newpw2', id => 'password2', class => 'validate', required => undef, minlength => 8, autocomplete => 'new-password'

			%= password_field 'newpw2', id => 'password2', class => 'validate', required => undef, minlength => 8, maxlength => 10000, autocomplete => 'new-password'

			<label for="password2">Passwort wiederholen</label>

		</div>

	</div>

templates/register.html.ep

+2 −2
Original line number Diff line number Diff line
@@ -17,12 +17,12 @@ 
		</div>

		<div class="input-field col l6 m12 s12">

			<i class="material-icons prefix">lock</i>

			%= password_field 'password', id => 'password', class => 'validate', required => undef, minlength => 8, autocomplete => 'new-password'

			%= password_field 'password', id => 'password', class => 'validate', required => undef, minlength => 8, maxlength => 10000, autocomplete => 'new-password'

			<label for="password">Passwort</label>

		</div>

		<div class="input-field col l6 m12 s12">

			<i class="material-icons prefix">lock</i>

			%= password_field 'password2', id => 'password2', class => 'validate', required => undef, minlength => 8, autocomplete => 'new-password'

			%= password_field 'password2', id => 'password2', class => 'validate', required => undef, minlength => 8, maxlength => 10000, autocomplete => 'new-password'

			<label for="password2">Passwort wiederholen</label>

		</div>

	</div>