|
1 window.wp = window.wp || {}; |
|
2 |
|
3 var passwordStrength; |
|
4 (function($){ |
|
5 wp.passwordStrength = { |
|
6 /** |
|
7 * Determine the strength of a given password |
|
8 * |
|
9 * @param string password1 The password |
|
10 * @param array blacklist An array of words that will lower the entropy of the password |
|
11 * @param string password2 The confirmed password |
|
12 */ |
|
13 meter : function( password1, blacklist, password2 ) { |
|
14 if ( ! $.isArray( blacklist ) ) |
|
15 blacklist = [ blacklist.toString() ]; |
|
16 |
|
17 if (password1 != password2 && password2 && password2.length > 0) |
|
18 return 5; |
|
19 |
|
20 var result = zxcvbn( password1, blacklist ); |
|
21 return result.score; |
|
22 }, |
|
23 |
|
24 /** |
|
25 * Builds an array of data that should be penalized, because it would lower the entropy of a password if it were used |
|
26 * |
|
27 * @return array The array of data to be blacklisted |
|
28 */ |
|
29 userInputBlacklist : function() { |
|
30 var i, userInputFieldsLength, rawValuesLength, currentField, |
|
31 rawValues = [], |
|
32 blacklist = [], |
|
33 userInputFields = [ 'user_login', 'first_name', 'last_name', 'nickname', 'display_name', 'email', 'url', 'description', 'weblog_title', 'admin_email' ]; |
|
34 |
|
35 // Collect all the strings we want to blacklist |
|
36 rawValues.push( document.title ); |
|
37 rawValues.push( document.URL ); |
|
38 |
|
39 userInputFieldsLength = userInputFields.length; |
|
40 for ( i = 0; i < userInputFieldsLength; i++ ) { |
|
41 currentField = $( '#' + userInputFields[ i ] ); |
|
42 |
|
43 if ( 0 == currentField.length ) { |
|
44 continue; |
|
45 } |
|
46 |
|
47 rawValues.push( currentField[0].defaultValue ); |
|
48 rawValues.push( currentField.val() ); |
|
49 } |
|
50 |
|
51 // Strip out non-alphanumeric characters and convert each word to an individual entry |
|
52 rawValuesLength = rawValues.length; |
|
53 for ( i = 0; i < rawValuesLength; i++ ) { |
|
54 if ( rawValues[ i ] ) { |
|
55 blacklist = blacklist.concat( rawValues[ i ].replace( /\W/g, ' ' ).split( ' ' ) ); |
|
56 } |
|
57 } |
|
58 |
|
59 // Remove empty values, short words, and duplicates. Short words are likely to cause many false positives. |
|
60 blacklist = $.grep( blacklist, function( value, key ) { |
|
61 if ( '' == value || 4 > value.length ) { |
|
62 return false; |
|
63 } |
|
64 |
|
65 return $.inArray( value, blacklist ) === key; |
|
66 }); |
|
67 |
|
68 return blacklist; |
|
69 } |
|
70 } |
|
71 |
|
72 // Backwards compatibility. |
|
73 passwordStrength = wp.passwordStrength.meter; |
|
74 })(jQuery); |