Veify Authorization Scheme

2016-05-26 12:21:09 +02:00 · 2016-05-26 12:21:09 +02:00 · ecbffe69dc
commit ecbffe69dc
parent da1363f026
1 changed files with 2 additions and 2 deletions
--- a/radicale/init.py
+++ b/radicale/init.py
@ -251,8 +251,8 @@ class Application:
        # Ask authentication backend to check rights
        authorization = environ.get("HTTP_AUTHORIZATION", None)

-        if authorization:
-            authorization = authorization.lstrip("Basic").strip()
+        if authorization and authorization.startswith("Basic"):
+            authorization = authorization[len("Basic"):].strip()
            user, password = self.decode(base64.b64decode(
                authorization.encode("ascii")), environ).split(":", 1)
        else: