Hello,

Attached is a patch that fixes the case of an http:// URL which has a
username/password with strange characters in it.

The HTTPSend component wrongly uses the urlencoded form of the
username/password when copying the username/password fields to the
authorization header. They should not be urlencoded in the headers.

This patch (created from Subversion rev. 133) fixes that.

I've sent this patch before but received no reply. If it is not acceptable
for some reason, I'd like to know this reason, if it's not a problem...

Michael.
Index: httpsend.pas
===================================================================
--- httpsend.pas	(revision 133)
+++ httpsend.pas	(working copy)
@@ -401,7 +401,12 @@
   begin

     User := FUsername;

     Pass := FPassword;

-  end;

+  end

+  else
+  begin
+    User:=DecodeURl(User);
+    Password:=DecodeURL(Password);
+  end;  
   if UpperCase(Prot) = 'HTTPS' then

   begin

     HttpTunnel := FProxyHost <> '';

------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
synalist-public mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/synalist-public

Reply via email to