Type: Security / Technical Debt There is an outstanding // TODO: Prevent signup triggers if password complexity score is poor on line 77. Currently, the code only verifies that the password is at least 8 characters long (line 28), but fails to enforce the inclusion of uppercase letters, numbers, or special characters. This makes the registration flow vulnerable to weak user passwords.
Type: Security / Technical Debt There is an outstanding // TODO: Prevent signup triggers if password complexity score is poor on line 77. Currently, the code only verifies that the password is at least 8 characters long (line 28), but fails to enforce the inclusion of uppercase letters, numbers, or special characters. This makes the registration flow vulnerable to weak user passwords.