如何使用 ( ) [ ] 大括号允许作为密码正则表达式中的特殊字符？

Question

I am using the following regular expression for a password field in my project:

/^(?=.*\d)(?=.*[~!@#$%^&*)(_+-:[}="`])(?=.*[a-z])(?=.*[A-Z]).{8,}$/

My requirement is to allow at least
1 Upper case
1 Lower case
1 Number
1 Special character

It should allow `~!@#$%^&*)(_+-:[}=" special characters. If I enter other characters it should not allow those.

But it is allowing other characters like |\\ etc.

I don't have much knowledge on regular expressions. Where am I going wrong?

Answer 1

Problem is placement of an unescaped - just after + in your character class which is in the middle and acting like a range between + ie 0x2b and : ie 0x3a . All the characters in this range are allowed due to this.

You can move - to end of character class or at the start like this:

/^(?=.*\d)(?=.*[~!@#$%^&*)(_+:[}="`-])(?=.*[a-z])(?=.*[A-Z])[~!@#$%^&*)(+:[}="`\w-]{8,}$/

Also important is to change DOT (any character) in the end to allowed set of characters as I've shown above. RegEx Demo

Answer 2

Whatever you don't want to allow just put them in square brackets([]) with hat sign(^)

example :

[^|][^/]

This will not allow these characters.

Try this :

Gt%:_=yh^|\5%3f

Answer 3

You need to escape the regex-specific characters ($,&,^,*,+,?,/,|,),(,],[,},{):

^(?=.*\d)(?=.*[\~\!\@\#\$\%\^\&\*\)\(\_\+\-\:\[\}\=\"\`])(?=.*[a-z])(?=.*[A-Z]).{8,}$

I usually just escape all punctuation to be safe, but there is no need to escape #, =, :,