DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=28728>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=28728

HttpUrl does not accept unescaped passwords

[EMAIL PROTECTED] changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |



------- Additional Comments From [EMAIL PROTECTED]  2004-09-08 11:44 -------
The userinfo is still not quite escaped correctly. Last time there were more and
more reports of users that tried to use e-mail addresses as usernames and
therefore had a problem with the '@' character.

I have attached a patch for HttpURL that should solve that problem. A similar
patch is however needed for HttpsURL as well. Note that I have removed duplicate
checkValid() calls and deprecated the constructors that take a userinfo as an
argument, because you cannot determine from that whether a colon is within a
username or password or serves to separate these two components.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to