Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Header value with equals sign is incorrectly written #12

Open
GoogleCodeExporter opened this issue Jun 21, 2015 · 7 comments
Open

Header value with equals sign is incorrectly written #12

GoogleCodeExporter opened this issue Jun 21, 2015 · 7 comments

Comments

@GoogleCodeExporter
Copy link

What steps will reproduce the problem?
1. In the header pane, enter a header whose value includes an equals sign, like 
"Authorization: GoogleLogin auth=test"

What is the expected output? What do you see instead?
The header should be written in the request with the equals sign. Instead, the 
equals sign gets translated into a colon, like "Authorization: GoogleLogin 
auth:test". See screenshot.

What version of the product are you using? On what operating system?
1.0.3 Windows 7 32

Please provide any additional information below.


Original issue reported on code.google.com by [email protected] on 16 Nov 2011 at 6:14

Attachments:

@GoogleCodeExporter
Copy link
Author

Thanks benhirashima for raising issues. They are quite valid and I'll include 
them in next release.

I believe it still passes correct header to request though it shows = replaced 
by : . Anyway I'll double check and will remove this discrepancy .

Original comment by a1yadu on 16 Nov 2011 at 6:42

  • Changed state: Accepted
  • Added labels: Priority-Low
  • Removed labels: Priority-Medium

@GoogleCodeExporter
Copy link
Author

Issue 14 has been merged into this issue.

Original comment by a1yadu on 19 Mar 2012 at 6:16

@GoogleCodeExporter
Copy link
Author

The problem here is the function RCUtil.getMapFromStr(), which splits the 
headers on "=". Within the Authentication header there are many "=" character, 
also at the end of the value, which are truncated by the used String.splt() 
function.

Original comment by [email protected] on 14 Aug 2012 at 11:34

Attachments:

@GoogleCodeExporter
Copy link
Author

Original comment by a1yadu on 18 Jul 2013 at 7:34

  • Changed state: Started

@GoogleCodeExporter
Copy link
Author

Issue 19 has been merged into this issue.

Original comment by a1yadu on 18 Jul 2013 at 8:00

@GoogleCodeExporter
Copy link
Author

I have confirmed that if you add an = sign in a header value, it does not pass 
the = properly.

In my case I am trying to send a Basic Auth header, and the base64 encoding has 
an = sign at the end.  Through packet traces, I can confirm the = sign is NOT 
passed to the server.

Original comment by [email protected] on 1 Dec 2013 at 1:24

@GoogleCodeExporter
Copy link
Author

I'm not sure how this could be considered a "low priority" defect.  This 
basically prevents the tool from being useful at all to anyone testing an 
endpoint with authentication enabled.  Thats... pretty critical.

Original comment by [email protected] on 5 Mar 2015 at 12:01

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant