Add password rules for vince.com

[dmmaslenn]

This website does not support - special character in password.

Overall Checklist

• I agree to the project's Developer Certificate of Origin
• The top-level JSON objects are sorted alphabetically
• There are no open pull requests for the same update

for password-rules.json

• The given rule isn't particularly standard and obvious for password managers
• Generated passwords have been tested from this rule using the Password Rules Validation Tool
• Information has been included about the website's requirements (eg. screenshots, error messages, steps during experimentation, etc.)
• The PR isn't documenting something that would be a common practice among password managers (e.g. minimal length of 6)

[rmondello]

What your rules says:
Required: one of a { digit, lower, upper, or special character from this set }

What the site says:

Required: 8 Characters
One capital and 1 lowercase letter
At least 1 number
At least one special character $%/()[]{}=?!.,-_*|+~#

Which translates to pseudo-code:

Min-length: 8
Required: digit
Required: lower
Required: upper
Required: one of these: $%/()[]{}=?!.,-_*|+~#

Also, ] is treated specially in our format. It has to be the last character of a character class.

With all of that, I think your rule should be:

minlength: 8; required: digit; required: lower; required: upper; required: [$%/(){}=?!.,_*|+~#[]];

[jessieberlin]

@rmondello Please do not be fooled by what the site visually claims to support. Their JS validates as follows: {length: /\S{8,}/, loweruppercase: /(?=.[A-Z])(?=.[a-z])/, number: /\d/, special: /[$%/()[]{}=?!.,_*|+~#]/}

Please do not put back in the "-" as it won't work.

[rmondello]

I'd love to review this with some changes!