Skip to content

Add change password URL and password rule quirks for vagaro.com, weve…#1091

Merged
aabosh merged 1 commit into
mainfrom
add-more-quirks
May 12, 2026
Merged

Add change password URL and password rule quirks for vagaro.com, weve…#1091
aabosh merged 1 commit into
mainfrom
add-more-quirks

Conversation

@dmmaslenn
Copy link
Copy Markdown
Collaborator

…rse.io

Screenshot 2026-05-10 at 12 14 33 AM

Overall Checklist

for password-rules.json

  • The given rule isn't particularly standard and obvious for password managers
  • Generated passwords have been tested from this rule using the Password Rules Validation Tool
  • Information has been included about the website's requirements (eg. screenshots, error messages, steps during experimentation, etc.)
  • The PR isn't documenting something that would be a common practice among password managers (e.g. minimal length of 6)

for change-password-URLs.json

  • There is no Well-Known URL for Changing Passwords (https://example.com/.well-known/change-password)
  • The URL either makes the experience better or no worse than being directed to just the domain in a non-logged-in state

Comment thread quirks/password-rules.json Outdated
"password-rules": "minlength: 8; maxlength: 50; max-consecutive: 2; required: lower; required: upper; required: digit; allowed: [-!\"#&'()+,./?@];"
},
"vagaro.com": {
"password-rules": "minlength: 9; required: lower; required: upper; required: digit; required: [@$!%*?&]; allowed: lower, upper, digit, [@$!%*?&];"
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need the allowed here?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We do not. We should remove it.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Removed.

Comment thread quirks/change-password-URLs.json Outdated
"weather.com": "https://weather.com/member/settings",
"webmd.com": "https://member.webmd.com/password-reset",
"welt.de": "https://signin.auth.welt.de/change-password",
"weverse.io": "https://weverse.io/more",
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this a high quality change password URL?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added more specific URL.

Comment thread quirks/password-rules.json Outdated
"password-rules": "minlength: 8; maxlength: 50; max-consecutive: 2; required: lower; required: upper; required: digit; allowed: [-!\"#&'()+,./?@];"
},
"vagaro.com": {
"password-rules": "minlength: 9; required: lower; required: upper; required: digit; required: [@$!%*?&]; allowed: lower, upper, digit, [@$!%*?&];"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We do not. We should remove it.

@aabosh aabosh merged commit ba956f3 into main May 12, 2026
10 checks passed
@aabosh aabosh deleted the add-more-quirks branch May 12, 2026 20:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants