password change accepted, but password doesn't work (code.djangoproject.com)
|Reported by:||Marek Onuszko||Owned by:||nobody|
|Has patch:||no||Needs documentation:||no|
|Needs tests:||no||Patch needs improvement:||no|
While trying to report the previous bug, I uncovered a bug with password change mechanism. Steps:
- Use Firefox, set character encoding to UTF-8
- Request a password change, check your mail, follow the password change link.
- Type in
- You will get a message saying the password has been changed successfully. However, you will not be able to log in using this password.
The issue seems to be with unicode and/or polish characters. I deliberately chose a short word above, to rule out things like spaces not being accepted.
Either the password change system should reject passwords with some characters while filling in the form, or it should accept them and they should work 100%.