Re: pass-through authentication and base64

[Emmanuel LÃcharny <elecharny@gmail.com>]

Le 8/15/12 1:56 PM, sergio a Ãcrit :
> On 08/15/2012 02:00 PM, Brett @Google wrote:
>
> > If you are sure there is nothing but SAFE-CHAR, check for space or and
> > non-ascii charset.
>
> I'm absolutely sure. 
Really ???

e1NBU0x9dXNlcm5hbWVAcmVhbG0K==

decoded gives :

0x7B 0x53 0x41 0x53 0x4C 0x7D 0x75 0x73 0x65 0x72 0x6E 0x61 0x6D 0x65 
0x40 0x72 0x65 0x61 0x6C 0x6D 0x0A

To me, the last char is a plain Line Feed character, something that is 
not in the SAFE_CHAR collection :

SAFE-CHAR                = %x01-09 / %x0B-0C / %x0E-7F
                           ; any value <= 127 decimal except NUL, LF,
                           ; and CR


And you are wondering why it's get Base64 encoded ?



--
Regards,
Cordialement,
Emmanuel LÃcharny
www.iktek.com