id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
37209	`UserAttributeSimilarityValidator` uses unordered string comparison	Terence Honles	Terence Honles	"`UserAttributeSimilarityValidator` only uses the `SequenceMatcher.quick_ratio` method (which uses an unordered comparison of two strings and is only intended to be used as an upper bound)

This causes what I would consider ""false positives"" for strings that are not actually similar (any anagram will produce a ratio of 1 (exactly equal)).

I discovered this because we had a flaky test in our CI (with a user having attributes generated using Faker) and I finally spent some time to investigate the flaky test. The two strings (lowercased) were ""andrews"" and ""new-password"", which lead me to wonder how those could be considered 70% similar.

I have added a test with the anagrams: ""enumerations"" & ""mountaineers"""	Bug	assigned	contrib.auth		Normal			Terence Honles	Unreviewed	1	0	0	0	0	0