Ticket #37209: patch.diff

django/contrib/auth/password_validation.py

@@ -197 +197 @@
                 ):
                     continue
                 if (
-                    SequenceMatcher(a=password, b=value_part).quick_ratio()
+                    (matcher := SequenceMatcher(a=password, b=value_part)).quick_ratio()
                     >= self.max_similarity
-                ):
+                ) and matcher.ratio() >= self.max_similarity:
                     try:
                         verbose_name = str(
                             user._meta.get_field(attribute_name).verbose_name

tests/auth_tests/test_validators.py

@@ -231 +231 @@
             )
         )
 
+        user.anagram = "mountaineers"
+        self.assertIsNone(
+            UserAttributeSimilarityValidator(user_attributes=["anagram"]).validate(
+                "enumerations", user=user
+            )
+        )
+
     @isolate_apps("auth_tests")
     def test_validate_property(self):
         class TestUser(models.Model):