Spot the bug - #98: Submit Form

Password form validator silently lets bad input through.

const form = document.querySelector('#signupForm');
const pwInput = document.querySelector('#password');
const confirmInput = document.querySelector('#confirmPassword');
const errorBox = document.querySelector('#formError');

form.addEventListener('submit', (event) => {
  const pw = pwInput.value;
  const confirmPw = confirmInput.value;

  if (pw.length < 8 || pw !== confirmPw) {
    errorBox.textContent = 'Passwords must match and be 8+ characters.';
  }

  console.log('Form submitted with valid password');
});

Reply with what is broken and how you would fix it.