Uploaded image for project: 'Undertow'
  1. Undertow
  2. UNDERTOW-2550

the visibility of the handleDigestHeader method in DigestAuthenticationMechanism.java

XMLWordPrintable

    • Icon: Question Question
    • Resolution: Done
    • Icon: Major Major
    • None
    • None
    • Security

      I have two questions about this commit UNDERTOW-1190 client can use bogus uri in digest authentication - undertow-io/undertow@facb33a , which was made a long time ago. Could you please provide me with an answer?

      1. I noticed that in this commit, the visibility of the handleDigestHeader method was changed from public to private. If this method had been used or misused by upper-layer applications, it could potentially cause compatibility issues. Could you please share the reason behind changing its visibility from public to private?

      2. If the method is kept public and not changed to private, would it affect this fix and potentially introduce any security vulnerabilities?

              flaviarnn Flavia Rainone
              yongheng_hgq@126.com gq han (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: