mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-07-13 09:50:08 -04:00
Add variations on GOV.UK Notify to blacklist
There’s a chance that someone will run out of imagination and use the name of the thing they’re signing up for as their password. This wouldn’t be caught by the generic blacklist.
This commit is contained in:
@@ -1,4 +1,10 @@
|
||||
blacklisted_passwords = [
|
||||
'govuknotify',
|
||||
'GOVUKnotify',
|
||||
'GOV.UK Notify',
|
||||
'GOV.UK notify',
|
||||
'gov.uk notify'
|
||||
] + [
|
||||
'11111111',
|
||||
'12345678',
|
||||
'123456789',
|
||||
|
||||
@@ -6,7 +6,7 @@ from unittest.mock import Mock
|
||||
|
||||
|
||||
@pytest.mark.parametrize('password', [
|
||||
'11111111', 'kittykat', 'evangeli'
|
||||
'govuknotify', '11111111', 'kittykat', 'evangeli'
|
||||
])
|
||||
def test_should_raise_validation_error_for_password(app_, mock_get_user_by_email, password):
|
||||
with app_.test_request_context():
|
||||
|
||||
Reference in New Issue
Block a user