Skip to content

Commit ceac490

Browse files
committed
verify password strictly
1 parent c47fbbf commit ceac490

File tree

1 file changed

+18
-1
lines changed

1 file changed

+18
-1
lines changed

src/models/encryption.ts

Lines changed: 18 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,24 @@ class Encryption {
2323
try {
2424
const decryptedSecret = CryptoJS.AES.decrypt(secret, this.password)
2525
.toString(CryptoJS.enc.Utf8);
26-
return decryptedSecret || 'Encrypted';
26+
27+
if (!decryptedSecret) {
28+
return 'Encrypted';
29+
}
30+
31+
if (decryptedSecret.length < 8) {
32+
return 'Encrypted';
33+
}
34+
35+
if (!/^[a-z2-7]+=*$/i.test(decryptedSecret) &&
36+
!/^[0-9a-f]+$/i.test(decryptedSecret) &&
37+
!/^blz\-/.test(decryptedSecret) && !/^bliz\-/.test(decryptedSecret) &&
38+
!/^stm\-/.test(decryptedSecret)) {
39+
console.log(decryptedSecret);
40+
return 'Encrypted';
41+
}
42+
43+
return decryptedSecret;
2744
} catch (error) {
2845
return 'Encrypted';
2946
}

0 commit comments

Comments
 (0)