From 2df2f8a3f9eafdf1a28ce458a874135d666d0cf9 Mon Sep 17 00:00:00 2001 From: gumi Date: Tue, 3 Mar 2020 20:44:12 -0500 Subject: tmwa accounts can have 4-character passwords (yes, it's dumb) --- src/routers/vault/middlewares/legacy/account.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/routers/vault/middlewares/legacy/account.js b/src/routers/vault/middlewares/legacy/account.js index 83048e3..dddabdb 100644 --- a/src/routers/vault/middlewares/legacy/account.js +++ b/src/routers/vault/middlewares/legacy/account.js @@ -5,7 +5,7 @@ const flatfile = require("../../utils/flatfile.js"); const regexes = { token: /^[a-zA-Z0-9-_]{6,128}$/, // UUID - any23: /^[^\s][^\t\r\n]{6,21}[^\s]$/, // tmwa password (this looks scary) + any23: /^[^\s][^\t\r\n]{2,21}[^\s]$/, // tmwa password (this looks scary) any30: /^[^\s][^\t\r\n]{6,28}[^\s]$/, // herc password (this looks scary) alnum23: /^[a-zA-Z0-9_]{4,23}$/, // mostly for username gid: /^[23][0-9]{6}$/, // account id -- cgit v1.2.3-60-g2f50