From 90b084395d2b5d27e119977af3021c8b8710314b Mon Sep 17 00:00:00 2001
From: Grant Bacon <btnarg+github@gmail.com>
Date: Sat, 22 Nov 2025 10:28:07 -0800
Subject: [PATCH 1/2] Add maxlength attribute to password input fields on
 splash.html

---
 copyparty/web/splash.html | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/copyparty/web/splash.html b/copyparty/web/splash.html
index 848b8905..9974e7dc 100644
--- a/copyparty/web/splash.html
+++ b/copyparty/web/splash.html
@@ -111,7 +111,7 @@
 		<div>
 			<form id="lf" method="post" enctype="multipart/form-data" action="{{ r }}/{{ qvpath }}">
 				<input type="hidden" id="la" name="act" value="login" />
-				<input type="password" id="lp" name="cppwd" placeholder=" password" />
+				<input type="password" id="lp" name="cppwd" placeholder=" password" maxlength="64" />
 				<input type="hidden" name="uhash" id="uhash" value="x" />
 				<input type="submit" id="ls" value="Unlock" />
 				{%- if ahttps %}
@@ -137,9 +137,9 @@
 				<input type="hidden" id="la" name="act" value="login" />
 				{%- if this.args.usernames %}
 				<input type="text" id="lu" name="uname" placeholder=" username" size="12" />
-				<input type="password" id="lp" name="cppwd" placeholder=" password" size="12" />
+				<input type="password" id="lp" name="cppwd" placeholder=" password" size="12" maxlength="64" />
 				{%- else %}
-				<input type="password" id="lp" name="cppwd" placeholder=" password" />
+				<input type="password" id="lp" name="cppwd" placeholder=" password" maxlength="64" />
 				{%- endif %}
 				<input type="hidden" name="uhash" id="uhash" value="x" />
 				<input type="submit" id="ls" value="login" />

From ae3b844300a3e44709f1cd66e878276eb385772d Mon Sep 17 00:00:00 2001
From: Grant Bacon <btnarg+github@gmail.com>
Date: Sat, 22 Nov 2025 10:53:08 -0800
Subject: [PATCH 2/2] use pattern and validitystate instead of maxlength

---
 copyparty/web/splash.html | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/copyparty/web/splash.html b/copyparty/web/splash.html
index 9974e7dc..07620204 100644
--- a/copyparty/web/splash.html
+++ b/copyparty/web/splash.html
@@ -111,7 +111,7 @@
 		<div>
 			<form id="lf" method="post" enctype="multipart/form-data" action="{{ r }}/{{ qvpath }}">
 				<input type="hidden" id="la" name="act" value="login" />
-				<input type="password" id="lp" name="cppwd" placeholder=" password" maxlength="64" />
+				<input type="password" id="lp" name="cppwd" placeholder=" password" oninput="this.setCustomValidity('')" oninvalid="this.setCustomValidity('Password must be between 1 and 64 characters')" "pattern="^.{1,64}$" />
 				<input type="hidden" name="uhash" id="uhash" value="x" />
 				<input type="submit" id="ls" value="Unlock" />
 				{%- if ahttps %}
@@ -137,9 +137,9 @@
 				<input type="hidden" id="la" name="act" value="login" />
 				{%- if this.args.usernames %}
 				<input type="text" id="lu" name="uname" placeholder=" username" size="12" />
-				<input type="password" id="lp" name="cppwd" placeholder=" password" size="12" maxlength="64" />
+				<input type="password" id="lp" name="cppwd" placeholder=" password" size="12" oninput="this.setCustomValidity('')" oninvalid="this.setCustomValidity('Password must be between 1 and 64 characters')" pattern="^.{1,64}$" />
 				{%- else %}
-				<input type="password" id="lp" name="cppwd" placeholder=" password" maxlength="64" />
+				<input type="password" id="lp" name="cppwd" placeholder=" password" oninput="this.setCustomValidity('')" oninvalid="this.setCustomValidity('Password must be between 1 and 64 characters')" pattern="^.{1,64}$" />
 				{%- endif %}
 				<input type="hidden" name="uhash" id="uhash" value="x" />
 				<input type="submit" id="ls" value="login" />