summaryrefslogtreecommitdiffstats
path: root/Lib/urllib
diff options
context:
space:
mode:
authorSenthil Kumaran <senthil@uthcode.com>2012-05-15 14:30:25 (GMT)
committerSenthil Kumaran <senthil@uthcode.com>2012-05-15 14:30:25 (GMT)
commit34f3fcc269be2ecded57ff3ae336977c5e74c42f (patch)
tree1abc52f596e83d0f4737281d1c663b7b65736512 /Lib/urllib
parent539f239e88cbcbdb11014c82ee5a5d8ee9536ec6 (diff)
downloadcpython-34f3fcc269be2ecded57ff3ae336977c5e74c42f.zip
cpython-34f3fcc269be2ecded57ff3ae336977c5e74c42f.tar.gz
cpython-34f3fcc269be2ecded57ff3ae336977c5e74c42f.tar.bz2
Issue #12541: Be lenient with quotes around Realm field of HTTP Basic Authentation in urllib2.
G: changed Misc/NEWS
Diffstat (limited to 'Lib/urllib')
-rw-r--r--Lib/urllib/request.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/Lib/urllib/request.py b/Lib/urllib/request.py
index fe2cfcd..cbcbe1a 100644
--- a/Lib/urllib/request.py
+++ b/Lib/urllib/request.py
@@ -794,7 +794,7 @@ class AbstractBasicAuthHandler:
# allow for double- and single-quoted realm values
# (single quotes are a violation of the RFC, but appear in the wild)
rx = re.compile('(?:.*,)*[ \t]*([^ \t]+)[ \t]+'
- 'realm=(["\'])(.*?)\\2', re.I)
+ 'realm=(["\']?)([^"\']*)\\2', re.I)
# XXX could pre-emptively send auth info already accepted (RFC 2617,
# end of section 2, and section 1.2 immediately after "credentials"