search

jquery-archive / jquery-mobile

jQuery Mobile Framework
https://jquerymobile.com
Other
9.68k stars 2.4k forks source link

Fixed issue in URL parsing #8650

Closed dryabov closed 5 years ago

dryabov commented 5 years ago

Fixed "Broken URL parsing" issue mentioned in issue #8640 [details: 1) empty username or password are allowed, 2) colon in password is allowed]

dryabov commented 5 years ago

I've fixed urlParseRE regex to handle forward and back slashed identically.

Bachstelze commented 5 years ago

This is an security issue like mentioned before so we should merge this state which can be cherry-picked to older versions. ref: #8640

apsdehal commented 5 years ago

@dryabov Thanks for all of the fixes.