Open GoogleCodeExporter opened 8 years ago
Thanks benhirashima for raising issues. They are quite valid and I'll include
them in next release.
I believe it still passes correct header to request though it shows = replaced
by : . Anyway I'll double check and will remove this discrepancy .
Original comment by a1yadu
on 16 Nov 2011 at 6:42
Issue 14 has been merged into this issue.
Original comment by a1yadu
on 19 Mar 2012 at 6:16
The problem here is the function RCUtil.getMapFromStr(), which splits the
headers on "=". Within the Authentication header there are many "=" character,
also at the end of the value, which are truncated by the used String.splt()
function.
Original comment by pho...@gmx.de
on 14 Aug 2012 at 11:34
Attachments:
Original comment by a1yadu
on 18 Jul 2013 at 7:34
Issue 19 has been merged into this issue.
Original comment by a1yadu
on 18 Jul 2013 at 8:00
I have confirmed that if you add an = sign in a header value, it does not pass
the = properly.
In my case I am trying to send a Basic Auth header, and the base64 encoding has
an = sign at the end. Through packet traces, I can confirm the = sign is NOT
passed to the server.
Original comment by harris....@gmail.com
on 1 Dec 2013 at 1:24
I'm not sure how this could be considered a "low priority" defect. This
basically prevents the tool from being useful at all to anyone testing an
endpoint with authentication enabled. Thats... pretty critical.
Original comment by robross0...@gmail.com
on 5 Mar 2015 at 12:01
Original issue reported on code.google.com by
benhiras...@gmail.com
on 16 Nov 2011 at 6:14Attachments: