1. (Major)
password generators generate long passwords (LastPass, 1Password, etc...), copy / pasting into the field will truncate the password and brick the user account, forcing a password reset.... if set during install as admin user this will brick the install
yetishare password fields appear to only takes 22 characters, should be extended to at least 64 characters
If a limit is in place the password field should display the maximum character limit.
2. (Major)
Accessing
https://example.com/admin/ - login page - Browser warning loads insecure mixed content
Offending resource:
"http://fonts.googleapis.com/css?family=Open+Sans:600"
Expected behaviour:
Should load all content via the HTTPS/HTTP method to avoid mixed content browser warning and secure the page from injections.
3. (Minor)
Upon installation, after visting the Admin dashboard, if no files have been uploaded, File Type and File Status modules on right do not display any graphics. Perhaps display "No files" instead of blank white box.