The GitHub Actions job "Java CI with Ant" on poi.git/tsp-redirect-auth has succeeded. Run started by GitHub user naruto-lgtm (triggered by pjfanning).
Head commit for run: 78f1b32c50e39cb53d02e6d5bf272d6d84e52bea / Nayyar <[email protected]> TimeStampSimpleHttpClient: drop credentials on cross-origin redirect handleRedirect copied every configured header, including the Basic Authorization header built from tspUser/tspPass, onto the connection for the redirect target. HttpURLConnection follows same-protocol redirects itself and drops Authorization there, so the redirects that reach this code are the scheme-changing ones: https to http sent the credentials in cleartext, and the Location could name any host. Only resend Authorization to the same host on the same scheme and port, or on an http to https upgrade with default ports. Report URL: https://github.com/apache/poi/actions/runs/39811185314 With regards, GitHub Actions via GitBox --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
