From d8a9003714306c5e1484afa7d48844b52dcd3546 Mon Sep 17 00:00:00 2001
From: Eldad Fux <eldad.fux@gmail.com>
Date: Tue, 18 Jan 2022 07:21:03 +0200
Subject: [PATCH 1/2] Updated password length min requirment in the console

---
 app/views/console/users/index.phtml      | 2 +-
 app/views/home/auth/recovery/reset.phtml | 4 ++--
 app/views/home/auth/signin.phtml         | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/app/views/console/users/index.phtml b/app/views/console/users/index.phtml
index b55917eb5c..607e4d3586 100644
--- a/app/views/console/users/index.phtml
+++ b/app/views/console/users/index.phtml
@@ -174,7 +174,7 @@ $smtpEnabled = $this->getParam('smtpEnabled', false);
                         <input type="email" class="full-width" id="user-email" name="email" required autocomplete="off" />
 
                         <label for="user-password">Password</label>
-                        <input type="password" class="full-width" id="user-password" name="password" required pattern=".{6,}" title="Six or more characters" autocomplete="off" />
+                        <input type="password" class="full-width" id="user-password" name="password" required pattern=".{8,}" title="Six or more characters" autocomplete="off" />
 
                         <hr />
 
diff --git a/app/views/home/auth/recovery/reset.phtml b/app/views/home/auth/recovery/reset.phtml
index 6ccefc419c..9d27f22e34 100644
--- a/app/views/home/auth/recovery/reset.phtml
+++ b/app/views/home/auth/recovery/reset.phtml
@@ -28,10 +28,10 @@
         <input type="hidden" name="secret" data-ls-bind="{{router.params.secret}}">
 
         <label>Password</label>
-        <input name="password" type="password" autocomplete="off" placeholder="" required data-forms-password-meter pattern=".{6,}" title="Six or more characters">
+        <input name="password" type="password" autocomplete="off" placeholder="" required data-forms-password-meter pattern=".{8,}" title="Six or more characters">
 
         <label>Confirm Password</label>
-        <input name="passwordAgain" type="password" autocomplete="off" placeholder="" required data-forms-password-meter pattern=".{6,}" title="Six or more characters">
+        <input name="passwordAgain" type="password" autocomplete="off" placeholder="" required data-forms-password-meter pattern=".{8,}" title="Six or more characters">
 
         <button type="submit" class="btn btn-primary"><i class="fa fa-sign-in"></i> Apply</button>
     </form>
diff --git a/app/views/home/auth/signin.phtml b/app/views/home/auth/signin.phtml
index fc21da1de8..7586b3ddf3 100644
--- a/app/views/home/auth/signin.phtml
+++ b/app/views/home/auth/signin.phtml
@@ -37,7 +37,7 @@ $root = ($this->getParam('root') !== 'disabled');
 
             <input name="email" type="email" class="full-width" autocomplete="email" placeholder="Email" required>
 
-            <input name="password" type="password" class="full-width" autocomplete="off" placeholder="Password" required pattern=".{6,}" title="Six or more characters">
+            <input name="password" type="password" class="full-width" autocomplete="off" placeholder="Password" required pattern=".{8,}" title="Six or more characters">
 
             <button>Sign In</button>
         </form>

From 61131434cbe754a94b8b529e52b68094c4e3f6f0 Mon Sep 17 00:00:00 2001
From: Eldad Fux <eldad.fux@gmail.com>
Date: Tue, 18 Jan 2022 16:25:14 +0200
Subject: [PATCH 2/2] Updated to use minlength and fixed alt attribute

---
 app/views/console/users/index.phtml      | 2 +-
 app/views/home/auth/recovery/reset.phtml | 4 ++--
 app/views/home/auth/signin.phtml         | 2 +-
 app/views/home/auth/signup.phtml         | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/app/views/console/users/index.phtml b/app/views/console/users/index.phtml
index 607e4d3586..e0a0306f05 100644
--- a/app/views/console/users/index.phtml
+++ b/app/views/console/users/index.phtml
@@ -174,7 +174,7 @@ $smtpEnabled = $this->getParam('smtpEnabled', false);
                         <input type="email" class="full-width" id="user-email" name="email" required autocomplete="off" />
 
                         <label for="user-password">Password</label>
-                        <input type="password" class="full-width" id="user-password" name="password" required pattern=".{8,}" title="Six or more characters" autocomplete="off" />
+                        <input type="password" class="full-width" id="user-password" name="password" required minlength="8" title="Eight or more characters" autocomplete="off" />
 
                         <hr />
 
diff --git a/app/views/home/auth/recovery/reset.phtml b/app/views/home/auth/recovery/reset.phtml
index 9d27f22e34..de67823513 100644
--- a/app/views/home/auth/recovery/reset.phtml
+++ b/app/views/home/auth/recovery/reset.phtml
@@ -28,10 +28,10 @@
         <input type="hidden" name="secret" data-ls-bind="{{router.params.secret}}">
 
         <label>Password</label>
-        <input name="password" type="password" autocomplete="off" placeholder="" required data-forms-password-meter pattern=".{8,}" title="Six or more characters">
+        <input name="password" type="password" autocomplete="off" placeholder="" required data-forms-password-meter minlength="8" title="Eight or more characters">
 
         <label>Confirm Password</label>
-        <input name="passwordAgain" type="password" autocomplete="off" placeholder="" required data-forms-password-meter pattern=".{8,}" title="Six or more characters">
+        <input name="passwordAgain" type="password" autocomplete="off" placeholder="" required data-forms-password-meter minlength="8" title="Eight or more characters">
 
         <button type="submit" class="btn btn-primary"><i class="fa fa-sign-in"></i> Apply</button>
     </form>
diff --git a/app/views/home/auth/signin.phtml b/app/views/home/auth/signin.phtml
index 7586b3ddf3..98cb513358 100644
--- a/app/views/home/auth/signin.phtml
+++ b/app/views/home/auth/signin.phtml
@@ -37,7 +37,7 @@ $root = ($this->getParam('root') !== 'disabled');
 
             <input name="email" type="email" class="full-width" autocomplete="email" placeholder="Email" required>
 
-            <input name="password" type="password" class="full-width" autocomplete="off" placeholder="Password" required pattern=".{8,}" title="Six or more characters">
+            <input name="password" type="password" class="full-width" autocomplete="off" placeholder="Password" required minlength="8" title="Eight or more characters">
 
             <button>Sign In</button>
         </form>
diff --git a/app/views/home/auth/signup.phtml b/app/views/home/auth/signup.phtml
index 9aecea62b5..817e1d75f1 100644
--- a/app/views/home/auth/signup.phtml
+++ b/app/views/home/auth/signup.phtml
@@ -46,7 +46,7 @@ $root = ($this->getParam('root') !== 'disabled');
         <input name="email" type="email" autocomplete="email" placeholder="" required data-ls-bind="{{router.params.email}}">
 
         <label>Password</label>
-        <input name="password" type="password" autocomplete="off" placeholder="" required data-forms-password-meter pattern=".{8,}" title="Eight or more characters">
+        <input name="password" type="password" autocomplete="off" placeholder="" required data-forms-password-meter minlength="8" title="Eight or more characters">
 
         <div class="agree margin-top-large margin-bottom-large">
             <div class="pull-start margin-end-small margin-bottom">