Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix long password validation in WebServer #7676

Merged
merged 1 commit into from
Oct 25, 2020

Conversation

earlephilhower
Copy link
Collaborator

Use a base64 encode that doesn't add CRs to the output when comparing
username:password values for authentication.

Fixes #7664

@arendst, can you please give this patch a try? I've tested a 100 character password with the HTTPBasicAuth example and it works for me.

Use a base64 encode that doesn't add CRs to the output when comparing
username:password values for authentication.

Fixes esp8266#7664
@arendst
Copy link

arendst commented Oct 25, 2020

Testing...

@arendst
Copy link

arendst commented Oct 25, 2020

Verified. Works as expected. Thx.

Copy link
Collaborator

@d-a-v d-a-v left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@earlephilhower earlephilhower merged commit c656266 into esp8266:master Oct 25, 2020
@earlephilhower earlephilhower deleted the httpauth branch October 25, 2020 11:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Max basic authentication password length restricted by base64 encoded linefeed
3 participants