You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "Justin Lipton (JIRA)" <ji...@apache.org> on 2010/02/26 00:34:27 UTC
[jira] Created: (HTTPCLIENT-920) HttpURL not escaping passwords
correctly
HttpURL not escaping passwords correctly
----------------------------------------
Key: HTTPCLIENT-920
URL: https://issues.apache.org/jira/browse/HTTPCLIENT-920
Project: HttpComponents HttpClient
Issue Type: Bug
Components: HttpClient
Affects Versions: 3.1 Final
Environment: All
Reporter: Justin Lipton
Using a password such as "test+user" in HttpURL e.g.
HttpURL url = new HttpURL("testuser", "test+user", webdavServer, webdavPort, path);
does not work in 3.1 - get a 401 unauthenticated.
I've confirmed that this does work when using HttpClient 2.0.2
Have not tried version 4.0.1
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org
[jira] Resolved: (HTTPCLIENT-920) HttpURL not escaping passwords
correctly
Posted by "Oleg Kalnichevski (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HTTPCLIENT-920?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Oleg Kalnichevski resolved HTTPCLIENT-920.
------------------------------------------
Resolution: Won't Fix
Justin,
I am sorry but there will be no fixes for 3.x any more. HttpClient 3.1 is effectively at the end of life. Please test against HttpClient 4.0
Oleg
> HttpURL not escaping passwords correctly
> ----------------------------------------
>
> Key: HTTPCLIENT-920
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-920
> Project: HttpComponents HttpClient
> Issue Type: Bug
> Components: HttpClient
> Affects Versions: 3.1 Final
> Environment: All
> Reporter: Justin Lipton
>
> Using a password such as "test+user" in HttpURL e.g.
> HttpURL url = new HttpURL("testuser", "test+user", webdavServer, webdavPort, path);
> does not work in 3.1 - get a 401 unauthenticated.
> I've confirmed that this does work when using HttpClient 2.0.2
> Have not tried version 4.0.1
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org
[jira] Commented: (HTTPCLIENT-920) HttpURL not escaping passwords
correctly
Posted by "Justin Lipton (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HTTPCLIENT-920?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12839527#action_12839527 ]
Justin Lipton commented on HTTPCLIENT-920:
------------------------------------------
Confirmed working correctly against 4.0...
> HttpURL not escaping passwords correctly
> ----------------------------------------
>
> Key: HTTPCLIENT-920
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-920
> Project: HttpComponents HttpClient
> Issue Type: Bug
> Components: HttpClient
> Affects Versions: 3.1 Final
> Environment: All
> Reporter: Justin Lipton
>
> Using a password such as "test+user" in HttpURL e.g.
> HttpURL url = new HttpURL("testuser", "test+user", webdavServer, webdavPort, path);
> does not work in 3.1 - get a 401 unauthenticated.
> I've confirmed that this does work when using HttpClient 2.0.2
> Have not tried version 4.0.1
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org
[jira] Commented: (HTTPCLIENT-920) HttpURL not escaping passwords
correctly
Posted by "Ortwin Glück (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HTTPCLIENT-920?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12838751#action_12838751 ]
Ortwin Glück commented on HTTPCLIENT-920:
-----------------------------------------
Even better, try "test:user". I haven't tested recently, but not even browsers used to properly escape that.
> HttpURL not escaping passwords correctly
> ----------------------------------------
>
> Key: HTTPCLIENT-920
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-920
> Project: HttpComponents HttpClient
> Issue Type: Bug
> Components: HttpClient
> Affects Versions: 3.1 Final
> Environment: All
> Reporter: Justin Lipton
>
> Using a password such as "test+user" in HttpURL e.g.
> HttpURL url = new HttpURL("testuser", "test+user", webdavServer, webdavPort, path);
> does not work in 3.1 - get a 401 unauthenticated.
> I've confirmed that this does work when using HttpClient 2.0.2
> Have not tried version 4.0.1
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org