Don't carry over the user & pass unless the host is the same.

rubygems · Feb 13, 2013 · 727e64d · 727e64d
1 parent 528d611
commit 727e64d
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/lib/bundler/fetcher.rb b/lib/bundler/fetcher.rb
@@ -144,8 +144,10 @@ def fetch(uri, counter = 0)
       when Net::HTTPRedirection
         Bundler.ui.debug("HTTP Redirection")
         new_uri = URI.parse(response["location"])
-        new_uri.user = uri.user
-        new_uri.password = uri.password
+        if new_uri.host == uri.host
+          new_uri.user = uri.user
+          new_uri.password = uri.password
+        end
         fetch(new_uri, counter + 1)
       when Net::HTTPSuccess
         Bundler.ui.debug("HTTP Success")