swift/swift
John Dickinson e00da6cabc properly quote www-authenticate header value
HTTP header values should be quoted. Since the WWW-Authenticate
header value contains user-supplied strings, it's important to
ensure it's properly quoted to ensure the integrity of the protocol.

Previous to this patch, the URL was unquoted and then the unquoted
value was returned in the header. This patch re-quotes the value
when it is set on the response.

This is filed as CVS-2014-3497

Fixes bug 1327414

Change-Id: If8bd8842f2ce821756e9b4461a18a8ac8d42fb8c
2014-06-18 11:10:17 -07:00
..
account debug level logs should not be translated 2014-05-11 14:46:10 +02:00
cli replaced e.message with a bare "e" object ref 2014-06-03 21:55:49 +00:00
common properly quote www-authenticate header value 2014-06-18 11:10:17 -07:00
container Merge "isolate representation from content in GET request" 2014-06-14 00:17:11 +00:00
obj replace string format arguments with function parameters 2014-05-20 11:40:39 +02:00
proxy Merge "xLO bug with auth tokens expiring during download." 2014-06-12 20:19:04 +00:00
__init__.py Make pbr a build-time only dependency 2013-10-29 12:29:49 -07:00