Skip to content

Username and password in basic auth are allowed to contain '.' #24589

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Oct 18, 2017

Conversation

rquadling
Copy link
Contributor

Initially reported by Fede Isas in beberlei/assert#234

Q A
Branch? 2.3
Bug fix? yes
New feature? no
BC breaks? no
Deprecations? no
Tests pass? yes
Fixed tickets
License MIT
Doc PR

@rquadling
Copy link
Contributor Author

Ahh. 2.3 is the first version to validate the basic auth part of a url. But that is failing due to the PHP5.3. Should I have made a PR against 2.7?

@chalasr
Copy link
Member

chalasr commented Oct 17, 2017

Yes, 2.7 is the lowest branch that is still maintained. 2.3 isn't maintained anymore.
It's not too late, you can rebase your branch against 2.7 and change the target branch of your PR (https://github.com/blog/2224-change-the-base-branch-of-a-pull-request).

@fabpot fabpot changed the base branch from 2.3 to 2.7 October 18, 2017 14:20
@fabpot
Copy link
Member

fabpot commented Oct 18, 2017

Thank you @rquadling.

@fabpot fabpot merged commit e5d57dd into symfony:2.7 Oct 18, 2017
fabpot added a commit that referenced this pull request Oct 18, 2017
… '.' (Richard Quadling)

This PR was merged into the 2.7 branch.

Discussion
----------

Username and password in basic auth are allowed to contain '.'

Initially reported by Fede Isas in beberlei/assert#234

| Q             | A
| ------------- | ---
| Branch?       | 2.3
| Bug fix?      | yes
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets |
| License       | MIT
| Doc PR        |

Commits
-------

e5d57dd Username and password in basic auth are allowed to contain '.'
@rquadling rquadling deleted the 2.3 branch October 18, 2017 15:28
@rquadling
Copy link
Contributor Author

Thank's to @fedeisas.

This was referenced Oct 30, 2017
This was referenced Nov 10, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants