123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081 |
- /* global zxcvbn */
- window.wp = window.wp || {};
- var passwordStrength;
- (function($){
- wp.passwordStrength = {
- /**
- * Determine the strength of a given password
- *
- * @param string password1 The password
- * @param array blacklist An array of words that will lower the entropy of the password
- * @param string password2 The confirmed password
- */
- meter : function( password1, blacklist, password2 ) {
- if ( ! $.isArray( blacklist ) )
- blacklist = [ blacklist.toString() ];
- if (password1 != password2 && password2 && password2.length > 0)
- return 5;
- if ( 'undefined' === typeof window.zxcvbn ) {
- // Password strength unknown.
- return -1;
- }
- var result = zxcvbn( password1, blacklist );
- return result.score;
- },
- /**
- * Builds an array of data that should be penalized, because it would lower the entropy of a password if it were used
- *
- * @return array The array of data to be blacklisted
- */
- userInputBlacklist : function() {
- var i, userInputFieldsLength, rawValuesLength, currentField,
- rawValues = [],
- blacklist = [],
- userInputFields = [ 'user_login', 'first_name', 'last_name', 'nickname', 'display_name', 'email', 'url', 'description', 'weblog_title', 'admin_email' ];
- // Collect all the strings we want to blacklist
- rawValues.push( document.title );
- rawValues.push( document.URL );
- userInputFieldsLength = userInputFields.length;
- for ( i = 0; i < userInputFieldsLength; i++ ) {
- currentField = $( '#' + userInputFields[ i ] );
- if ( 0 === currentField.length ) {
- continue;
- }
- rawValues.push( currentField[0].defaultValue );
- rawValues.push( currentField.val() );
- }
- // Strip out non-alphanumeric characters and convert each word to an individual entry
- rawValuesLength = rawValues.length;
- for ( i = 0; i < rawValuesLength; i++ ) {
- if ( rawValues[ i ] ) {
- blacklist = blacklist.concat( rawValues[ i ].replace( /\W/g, ' ' ).split( ' ' ) );
- }
- }
- // Remove empty values, short words, and duplicates. Short words are likely to cause many false positives.
- blacklist = $.grep( blacklist, function( value, key ) {
- if ( '' === value || 4 > value.length ) {
- return false;
- }
- return $.inArray( value, blacklist ) === key;
- });
- return blacklist;
- }
- };
- // Back-compat.
- passwordStrength = wp.passwordStrength.meter;
- })(jQuery);
|