Password Reset Allows Spaces in New Password #208

Closed
opened 2025-09-22 10:14:07 -04:00 by swap12875d · 0 comments

Description:

Password reset allows setting a new password containing space characters, which should be restricted as per password policy.

Current URL:

https://www.topcoder.com/

Steps to reproduce:

  1. Navigate to https://www.topcoder.com/
  2. Click on Login button
  3. Click on the "Forgot Password" link.
  4. Follow the instructions to receive the password reset email.
  5. Click the password reset link from the received email.
  6. Enter a new password that includes one or more space characters.
  7. Submit the password reset form.

Actual results:

  • Password reset succeeds even when the new password contains space characters.
  • The system accepts passwords with spaces which may cause security or validation concerns.

Expected results:

  • Password reset should reject passwords containing space characters.
  • User should be shown a validation error indicating spaces are not allowed in the password.
  • Password policy enforcing no spaces should be consistently applied during reset.

Screenshots/Videos:

OS and Browser version:

Windows 11, Chrome 140.0.7339.186

VersionDetails:

Windows_chrome_version_screenshot

Device:

Windows Laptop

Reproducibility:

5/5

#### Description: Password reset allows setting a new password containing space characters, which should be restricted as per password policy. #### Current URL: https://www.topcoder.com/ #### Steps to reproduce: 1. Navigate to https://www.topcoder.com/ 2. Click on Login button 3. Click on the "Forgot Password" link. 4. Follow the instructions to receive the password reset email. 5. Click the password reset link from the received email. 6. Enter a new password that includes one or more space characters. 7. Submit the password reset form. #### Actual results: - Password reset succeeds even when the new password contains space characters. - The system accepts passwords with spaces which may cause security or validation concerns. #### Expected results: - Password reset should reject passwords containing space characters. - User should be shown a validation error indicating spaces are not allowed in the password. - Password policy enforcing no spaces should be consistently applied during reset. #### Screenshots/Videos: <video src="attachments/519a0aa0-2627-4616-827c-e2403289fa0d" title="spaces in password.mp4" controls></video> #### OS and Browser version: Windows 11, Chrome 140.0.7339.186 VersionDetails: <img src='/attachments/1f354afb-af2d-44dc-8c03-73de2f71fa79' width='600' height='375' alt='Windows_chrome_version_screenshot'> #### Device: Windows Laptop #### Reproducibility: 5/5
swap12875d added the ChromeWindowsFunctional labels 2025-09-22 10:14:07 -04:00
nithya160925 added the Not a bug label 2025-09-24 15:18:17 -04:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Topcoder-Platform/public-website-qa-bug-hunt#208