Hank Leininger a81a9a31e4 Fixed the regexes for Authorization: headers. ...

The \r was escaped inside a character class where it did not need to be.
Instead of the search stopping at the first \r as intended, it stopped
at the first literal r (which can occur in normal b64 content) or the
first literal \ (unlikely to occur in HTTP headers in general).

The \\ has been there since the very first commit of Responder in 2013.

2016-08-02 00:50:51 -04:00

8.6 KiB

Raw Blame History

View Raw