[Yanel-dev] [Bug 5323] New: Neutron-Auth produces ill-formed authentication exception if URIs contain ampersands

[bugzilla-daemon at bugzilla.wyona.com]

http://bugzilla.wyona.com/cgi-bin/bugzilla/show_bug.cgi?id=5323

           Summary: Neutron-Auth produces ill-formed authentication
                    exception if URIs contain ampersands
           Product: Yanel
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: major (B)
          Priority: P2
         Component: Protocol
        AssignedTo: michael.wechner at wyona.org
        ReportedBy: awuest at student.ethz.ch
         QAContact: yanel-development at wyona.com


For a failed auth request at
http://yanel.wyona.org:80/specification/update-dependency-manager.html?yanel.resource.viewid=source&yanel.resource.usecase=checkout,
Yanel returns

<?xml version="1.0"?><exception xmlns="http://www.wyona.org/neutron/1.0"
type="authentication"><message>Authentication
failed!</message><authentication><original-request
url="http://yanel.wyona.org:80/specification/update-dependency-manager.html?yanel.resource.viewid=source&yanel.resource.usecase=checkout"/><login
url="http://yanel.wyona.org:80/specification/update-dependency-manager.html?yanel.resource.viewid=source&yanel.resource.usecase=checkout&amp;yanel.usecase=neutron-auth"
method="POST"><form><message>Enter username and password for "Yanel Website" at
"/yanel-website/"</message><param description="Username" name="username"/><param
description="Password" name="password"/></form></login><logout
url="http://yanel.wyona.org:80/specification/update-dependency-manager.html?yanel.resource.viewid=source&yanel.resource.usecase=checkout&amp;yanel.usecase=logout"
realm="Yanel Website"/></authentication></exception>

which contains unescaped ampersands in the URIs. This renders the document
ill-formed, and subsequently, clients can't parse it.



------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.