Bug #1793
WebDAV MOVE doesn’t work when Destination contains login information
| Status: | Fixed | Start: | ||
|---|---|---|---|---|
| Priority: | Normal | Due date: | ||
| Assigned to: | jan | % Done: | 100% |
|
| Category: | mod_webdav | |||
| Target version: | 1.4.24 | |||
| Missing in 1.5.x: | No |
Description
The Destination field of a WebDAV MOVE request isn’t limited to the format suggested in mod_webdav.c. It can also contain login information, for example,
https://user:password@domain.tld/path?query
Mod_webdav.c doesn’t care to look for any login information, however, and thus the “same domain” test can fail, even though the actual domain is the same. The patch is simple: Simply look for an ‘@’ in the part that we’re considering to be the the domain. If we find it, start the domain right after it.
-- now
Associated revisions
mod_webdav: Patch to skip login information for domain part of Destination field (fixes #1793)
History
Updated by icy about 1 year ago
- Target version changed from 1.4.21 to 1.4.22
- Patch available set to No
Updated by stbuehler about 1 year ago
- Target version changed from 1.4.22 to 1.4.23
Also available in: Atom