From ecbffe69dc3ad05ebc60b3b926f23be86a5d6a88 Mon Sep 17 00:00:00 2001 From: Unrud Date: Thu, 26 May 2016 12:21:09 +0200 Subject: [PATCH] Veify Authorization Scheme --- radicale/__init__.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/radicale/__init__.py b/radicale/__init__.py index f679304..fb23675 100644 --- a/radicale/__init__.py +++ b/radicale/__init__.py @@ -251,8 +251,8 @@ class Application: # Ask authentication backend to check rights authorization = environ.get("HTTP_AUTHORIZATION", None) - if authorization: - authorization = authorization.lstrip("Basic").strip() + if authorization and authorization.startswith("Basic"): + authorization = authorization[len("Basic"):].strip() user, password = self.decode(base64.b64decode( authorization.encode("ascii")), environ).split(":", 1) else: