mozilla-services / autopush

Python Web Push Server used by Mozilla
https://autopush.readthedocs.io/
Mozilla Public License 2.0
217 stars 34 forks source link

Clean up padding and quotes in headers #1419

Closed jrconlin closed 4 years ago

jrconlin commented 4 years ago

Client reports issues with quotes and padding appearing in values passed from Encryption and Crypto-Key headers.

These are legacy "aesgcm" encryption formats that are still in use. Server should probably clean these values up (remove quotes and padding) before relaying.

Client may also take steps to resolve this issue.

image