I am trying to figure out why the liferay portal restricted the number of special characters/symbols to use in password. When I dig into its API, it is restricted to 9 characters which are configured in property file with a key "passwords.passwordpolicytoolkit.charset.symbols" and having values "_ . ! @ $ * = - ?".
There are many other special characters like #, ^. % etc, but they were not included by default.
I knew we can customize and include as many symbols as we want to, but is there any specific reason why liferay restricted these characters?