Description
When adding DefaultAccountRule instances to an Account Policy or DefaultPasswordRule instances to a Password Policy from Admin Console, in case wordsNotPermitted, prefixesNotPermitted or suffixesNotPermitted are not specified, the following JSON payload is sent to the Core (excerpt):
"wordsNotPermitted": [ null ], "prefixesNotPermitted": [ null ], "suffixesNotPermitted": [ null ]
e.g. instead of empty arrays, singleton arrays with a null element.
This will later cause troubles during policy evaluation.