I am trying to figure out why the liferay portal restricted the number of special characters/symbols to use in password. When I dig into its API, it is restricted to 9 characters which are configured in property file with a key "passwords.passwordpolicytoolkit.charset.symbols" and having values "_ . ! @ $ * = - ?".
There are many other special characters like #, ^. % etc, but they were not included by default.
I knew we can customize and include as many symbols as we want to, but is there any specific reason why liferay restricted these characters?
Sun Certified Java Programmer with 93 percent
subject: Why liferay portal limited the allowed special characters in password?