Related #30282

The issue #30282 is not related, it just uses this feature to show a bug in the system. It could have been any other feature that does form validation.

Issue #29859 is the implementation of this feature.

I think that com_config/src/controller/ComponentController.php needs return false; on line 120.

That's expected behavior because 8 chars are the minimum password length. One of the main reasons for this is that even on localhost and especially local development get deployed on live systems.

If you really want a insecure password you have to write a plugin to override the limitation settings.

@HLeithner I don't care if it's expected or not. If you don't allow 7 character passwords, display an inline alert. This is simple UX.
A blind user will have a nightmare trying to fill this form in.

Please re-read the issue. I'm not raising an issue about the actual minimum length required for a password. I'm raising an issue because the page allows you to save a min value that isn't actually allowed, with no warning whatsoever.

Ok sorry then the validator should be fixed but I would expect that a screenreader notifies the user about the min and max attributes.

#30906 came close to fixing this as it gave the error message but it didnt stop the form also saying it was successfuly saved

Fixed in #31105.