Yes. This is important. Can you send me a patch?

On Feb 5, 10:06 pm, Jonathan Lundell <jlund...@pobox.com> wrote:
> IS_URL() fails when a userinfo field is present in the URL. Examples:
>
>         http://u...@domain.com
>         http://user:passw...@domain.com
>
> Seehttp://tools.ietf.org/html/rfc39863.2.1. (The password portion is 
> deprecated as insecure, but it's still legal.)
>
> Alsohttp://www.faqs.org/rfcs/rfc2396.html
>
> This ought to be fixed in IS_GENERIC_URL(), perhaps under control of an 
> option flag.

-- 
You received this message because you are subscribed to the Google Groups 
"web2py-users" group.
To post to this group, send email to web...@googlegroups.com.
To unsubscribe from this group, send email to 
web2py+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en.

Reply via email to