Some characters are rejected by account request page

[ahelsing]

Some passwords are rejected on the IdP account request page. When you hit submit, you get an error message:

"Please match the requested format. The passwords must match."

Note the passwords do match.
There is no requested format on the page, which adds to the confusion.

Through trial and error, I found 3 characters which, when included in the password, appear to cause this error: $ ^ & and |

There are probably others.

Probably this is because we set the 'pattern' on password2 to the literal, and those 3 are control characters for a javascript regex.

Maybe the HTML5 is too fancy.
Look here: http://www.the-art-of-web.com/javascript/validate-password/#.UglFPmR4bsc

Imported from trac ticket #72, created by ahelsing on 01-13-2014 at 14:02, last modified: 05-12-2015 at 14:01

[tcmitchell]

A user reported that the ampersand character appeared to cause the same error message.

Trac comment by tmitchel (github user: tcmitchell) on 05-12-2015 at 14:01