696 B
696 B
BUG-005 — Password confirmation is compared case-insensitively
- Priority: Critical
- Severity: Blocker
- Environment: Chrome 128, desktop
- Steps to reproduce:
- Fill in all form fields with valid data
- Enter
Secret12in the "Password" field - Enter
secret12(same string, lowercase) in "Confirm password" - Click "Create account"
- Expected result: Error "Passwords do not match" — the strings differ when case is considered
- Actual result: The form treats the passwords as matching; registration succeeds
- Impact: A user may accidentally set a password that differs from what they intended to type — risk of being unable to log in later