Skip to content

Conversation

@itowlson
Copy link
Collaborator

@itowlson itowlson commented Nov 5, 2024

Fixes #2905.

I've added some tests to cover the behaviour. However, it will get confused in a different way if the username-password segment contains a forward slash (ivan:sec/[email protected]). I'm not sure if that's a concern? @rylev you may know a better way to tackle this in which case feel free to close this!

Copy link
Collaborator

@rylev rylev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This seems like an improvement though we probably want to at some point throw away this code and use some sort of off-the-shelf URL parser.

@itowlson itowlson force-pushed the fix-at-in-url-path-host branch from c2ec1de to 227aa8c Compare November 5, 2024 18:10
@itowlson itowlson enabled auto-merge November 5, 2024 18:20
@itowlson itowlson merged commit 0685481 into spinframework:main Nov 5, 2024
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

incorrect outbound http validation blocks request if url contains '@'

3 participants