[wp-trac] [WordPress Trac] #35500: Login page: user can change password on " " but can't log in with new password.

[WordPress Trac]

#35500: Login page: user can change password on " " but can't log in with new
password.
------------------------------------+-----------------------------
 Reporter:  antonrinas              |       Owner:  hellofromTonya
     Type:  defect (bug)            |      Status:  assigned
 Priority:  lowest                  |   Milestone:
Component:  Login and Registration  |     Version:
 Severity:  normal                  |  Resolution:
 Keywords:  needs-patch             |     Focuses:
------------------------------------+-----------------------------
Changes (by hellofromTonya):

 * keywords:  needs-patch close => needs-patch
 * owner:  (none) => hellofromTonya
 * status:  new => assigned


Comment:

 Hello @antonrinas,

 Welcome to WordPress Trac! Thank you for reporting this issue.

 For JavaScript enabled browsers, this issue was fixed in ticket #42766
 with changeset [49118]. This change did the following:

 - the password field is trimmed first
 - if empty, an `empty` class is added to the field and the `Save Password`
 button is not displayed
 - requires JavaScript

 What if the browser has JavaScript disabled? The problem still exists.

 A possible solution:
 - Trim and then check if `pass1` is empty  in `wp-login.php`
 - if yes, generate an error message

 This step would return the user back to the password reset page with a
 reason why their password was not accepted.

 Testing now and will submit a patch for consideration.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/35500#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform