From 5a813d91f3d4b1c6eff81dfa9c88e2b587442984 Mon Sep 17 00:00:00 2001 From: Jonathan Prykop Date: Mon, 7 Dec 2015 17:46:45 -0600 Subject: RT#29354: Password Security in Email [customer fields, images, js files] --- FS/FS/svc_acct.pm | 1 + 1 file changed, 1 insertion(+) (limited to 'FS/FS/svc_acct.pm') diff --git a/FS/FS/svc_acct.pm b/FS/FS/svc_acct.pm index 38cebc1..53b12f1 100644 --- a/FS/FS/svc_acct.pm +++ b/FS/FS/svc_acct.pm @@ -2686,6 +2686,7 @@ sub password_svc_check { my ($self, $password) = @_; foreach my $field ( qw(username finger) ) { foreach my $word (split(/\W+/,$self->get($field))) { + next unless length($word) > 2; if ($password =~ /$word/i) { return qq(Password contains account information '$word'); } -- cgit v1.1