I'm swearing profusely at the modern web again
Y'all think this is a half-assed attempt to prevent more sophisticated SQL injection?
No idea, honestly, but my guess is that someone wasn't 100% sure how to sanitize their inputs and decided to limit input length and special character sets to cover themselves, just in case.
I personally think I should be able to use full unicode for my passwords, who's with me? 😂