View | Details | Raw Unified | Return to bug 37132
Collapse All | Expand All

(-)DigestAuthenticator.java (-6 / +7 lines)
Lines 221-230 Link Here
221
            return (null);
221
            return (null);
222
        authorization = authorization.substring(7).trim();
222
        authorization = authorization.substring(7).trim();
223
223
224
224
        String[] tokens = authorization.split(",(?=(?:[^\"]*\"[^\"]*\")+$)");
225
        StringTokenizer commaTokenizer =
225
        
226
            new StringTokenizer(authorization, ",");
227
228
        String userName = null;
226
        String userName = null;
229
        String realmName = null;
227
        String realmName = null;
230
        String nOnce = null;
228
        String nOnce = null;
Lines 235-242 Link Here
235
        String response = null;
233
        String response = null;
236
        String method = request.getMethod();
234
        String method = request.getMethod();
237
235
238
        while (commaTokenizer.hasMoreTokens()) {
236
        for (int i = 0; i < tokens.length; i++) {
239
            String currentToken = commaTokenizer.nextToken();
237
            String currentToken = tokens[i];
238
            if (currentToken.length() == 0)
239
                continue;
240
            
240
            int equalSign = currentToken.indexOf('=');
241
            int equalSign = currentToken.indexOf('=');
241
            if (equalSign < 0)
242
            if (equalSign < 0)
242
                return null;
243
                return null;

Return to bug 37132