[webkit-help] WebKit authentication prompts even if http://user:pass at host used (Barry Scott)

Barry Scott barry.scott at onelan.co.uk
Tue Aug 3 06:02:41 PDT 2010


On Tuesday 03 August 2010 08:24:19 haithem rahmani wrote:
> >
> > Message: 1
> > Date: Mon, 2 Aug 2010 15:26:49 +0100
> > From: Barry Scott <barry.scott at onelan.co.uk>
> > To: webkit-help at lists.webkit.org
> > Subject: [webkit-help] WebKit authentication prompts even if
> >        http://user:pass@host used
> > Message-ID: <201008021526.49857.barry.scott at onelan.co.uk>
> > Content-Type: text/plain;  charset="us-ascii"
> >
> > I'm seeing unexpected behaviour from WebKit when I ask for a URI with
> > user and password in it to be loaded. The Soap "authentication" signal is
> > issued.
> >
> 
> according to the RFC 3986 (http://www.ietf.org/rfc/rfc3986.txt) :
> 
> Use of the format "user:password" in the userinfo field is
>    deprecated.  Applications should not render as clear text any data
> after the first colon (":") character found within a userinfo
>    subcomponent unless the data after the colon is the empty string
>    (indicating no password)...

What has this to do with using the supplied user and password? This
seems to be able presentation and storage and the operative word
use is "should" not "must".

Yes I am using webitgtk, sorry forgot to mention that.

Anyway I have logged as a bug as suggest on IRC #webkit-gtk

Barry


More information about the webkit-help mailing list