Software / code / prosody-modules
Annotate
.hgtags @ 5984:97375a78d2b5
mod_http_oauth2: Reject URLs with 'userinfo' part (thanks mimi89999)
The LuaSocket parser supports these but they're deprecated without
replacement by RFC 3986
> Use of the format "user:password" in the userinfo field is deprecated
Allowing it in OAuth2 URLs is probably bad from a security perspective.
| author | Kim Alvefur <zash@zash.se> |
|---|---|
| date | Thu, 29 Aug 2024 16:02:46 +0200 |
| parent | 2169:9fa588babbba |
| rev | line source |
|---|---|
|
638
60cee6923ee7
Tagging last 0.8.x compatible revision of this repo, for 0.8.x support move to http://code.google.com/p/prosody-modules.0-8/
Matthew Wild <mwild1@gmail.com>
parents:
diff
changeset
|
1 2c07bcf56a36d6e74dc0f5422e89bd61f4d31239 0.8-diverge |
|
2169
9fa588babbba
Tag last commit available on Google Code for future reference
Kim Alvefur <zash@zash.se>
parents:
638
diff
changeset
|
2 1656d4fd71d07aa3a52da89d4daf7723a555e7dd last-google-code-commit |
