HexBrain

Legal Robot · Report #265863

Wrong password validation message

Validstatus
5upvotes
4 Oct 2017disclosed

How it was found

Hello,

Your password validation message seems to be contradicting with the server side validation of password field during new account sign up at https://app.legalrobot.com/sign-in.

When you start typing in password field, it says Passwords must be more than 8 characters but when you type more than 8 characters with valid combinations of letters, numbers, symbols etc, still it doesn't validate properly and it says, Please fix this field. even when complexity is fair enough.

When you type in 11 characters, then only it takes password as valid.

I think you should either change the message or validate the password field properly.

Also, same problem when login !

Thanks Ashish

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original