dropbox / dropbox/zxcvbn

JS package being marked as adult content

Open
#239 3 comments 1 reaction 0 assignees View on GitHub
Dominant language
CoffeeScript
Stars
16.1k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

Hi all,

We've had an issue where Bitdefender is blocking the `zxcvbn` JS libarary -- categorising it as pornography -- presumably due to the number of adult-themed passwords included.

Seems to occur only on Windows.

A way of overcoming this would be great - perhaps an option of taking a url to retrieve the data via AJAX after initialising, reversing the stored words or similar.

Any feedback or advice greatly appreciated. Thanks in advance.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the Bitdefender block on Windows against the zxcvbn JavaScript package and inspect how its adult-themed password data is stored in the distributed library. Compare possible data-loading or transformation approaches, then verify that the package is no longer categorised as pornography while password-strength estimation still works.

Written by the indexing model from the issue text.

Assessment

Tech stack
coffeescript, javascript
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.