• Gitea version (or commit ref): 1.2.3
• Database (use [x]):
  • PostgreSQL
  • MySQL
  • MSSQL
  • SQLite
• Can you reproduce the bug at https://try.gitea.io:
  • Yes
  • No
  • Not relevant

Description

The MIN_PASSWORD_LENGTH configuration added in #223 is only checked when signing up or when resetting the password via email. When changing the password in the settings (e.g. https://try.gitea.io/user/settings/security) one can enter a password with any length.