Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Digest authorization header parsing bug #27

Closed
kevinwatkins opened this issue Oct 7, 2013 · 1 comment
Closed

Digest authorization header parsing bug #27

kevinwatkins opened this issue Oct 7, 2013 · 1 comment
Assignees

Comments

@kevinwatkins
Copy link

In digest.coffee, in the parseAuthorization function, the line

[name, value] = token.split "=", 2

doesn't do the right thing when the value itself might contain the character =. For example, if the request URI is

/javascript/hates?me=true

then the authorization header will contain

..., uri="/javascript/hates?me=true", ...

and the result will be to set name to uri and value to "/javascript/hates?me, truncating the URI.

@ghost ghost assigned gevorg Oct 7, 2013
@gevorg
Copy link
Owner

gevorg commented Oct 7, 2013

Thanks for reporting, fixed and published as 2.0.5 version. Gevorg

@gevorg gevorg closed this as completed Oct 7, 2013
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants