Hi Joe,
I didn't know there was a problem with using
js support for negative lookaheads.
You're right about the odd initial requirement though. IMO if you think you're getting good security by asking users to create an awkward password like this then they'll just write it down!
rgds
Phil