4 ms·
Anecdote time! Some years ago I had a password on an account that contained a space character. One day, out of the blue, couldn’t log in. Went through the rese
by smitelli 2y ago
Anecdote time!
Some years ago I had a password on an account that contained a space character. One day, out of the blue, couldn’t log in. Went through the reset flow, picked another password that also happened to contain a space, still couldn’t log in.
I started poking at it and realized that I had to enter the space as `+` at the login form. It worked that way. I never quite figured out what they would’ve had to do to get the form encoding so specifically wrong.
Since then, I’ve tried to carefully consider just how “special” I want my special characters to be.
- Out_of_Characte 2y agoI've had long form passwords cut short without informing me at all until I failed the account creation, login and password reset multiple times. I counted every character that was displayed during password creation and matched it exactly with what I've entered only to find out the login portal cut my password by one character. It did give me inspiration for another infuriating username ^
- Thorrez 2y agoI assume the browser encoded the space to + with x-www-form-urlencoded, then the server never decoded it. https://en.wikipedia.org/wiki/Percent-encoding#The_application/x-www-form-urlencoded_type https://en.wikipedia.org/wiki/Percent-encoding#The_applicati...