50ff362650
If a user uses a password with certain characters (e.g. /, #, +, etc.) UrlSanitizer#full_url will generate an invalid URL that cannot be parsed properly by Addressable::URI. If used with UrlBlocker, this will be flagged as an invalid URI.
5 lines
106 B
YAML
5 lines
106 B
YAML
---
|
|
title: Escape username and password in UrlSanitizer#full_url
|
|
merge_request: 20684
|
|
author:
|
|
type: fixed
|