When passing a URI like http://user:passwd@host.org/index.html the HTTP
Request header looks like:

GET http://user:passwd@host.org/index.html HTTP/1.1\r\n
...
Authorization: Basic Zmjechskdhsi==\r\n
....

Here Authorization is correctly filled, but 'user:passwd@' is not stripped
from the URI of the GET. This is not according to spec (rfc2616 sec. 3.2.2)
Is this a bug?

This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
Received on 2004-07-30