Skip to content

erp5
erp5
Commit 770bd568 authored by Kazuhiko Shiozaki's avatar Kazuhiko Shiozaki
Browse files
Options

Zope2: workaround for broken implementation of Basic auth encoding.

parent 2eec2f13
Pipeline #26480 failed with stage
    in 0 seconds
    Show whitespace changes
    Inline Side-by-side
    Showing with 4 additions and 0 deletions
    product/ERP5Security/ERP5DumbHTTPExtractionPlugin.py
    View file @ 770bd568
    ...@@ -55,6 +55,10 @@ class ERP5DumbHTTPExtractionPlugin(BasePlugin): ...@@ -55,6 +55,10 @@ class ERP5DumbHTTPExtractionPlugin(BasePlugin):
    security.declarePrivate('extractCredentials') security.declarePrivate('extractCredentials')
    @UnrestrictedMethod @UnrestrictedMethod
    def extractCredentials(self, request): def extractCredentials(self, request):
    # BBB Zope2
    # Fix possibly broken _auth for very long auth
    if getattr(request, '_auth', '').lower().startswith('basic '):
    request._auth = request._auth.replace('\n', '')
    return DumbHTTPExtractor().extractCredentials(request); return DumbHTTPExtractor().extractCredentials(request);
    #Form for new plugin in ZMI #Form for new plugin in ZMI
    ......
    Markdown is supported
    0% or
    You are about to add 0 people to the discussion. Proceed with caution.
    Finish editing this message first!
    Please register or to comment
    GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7