req.open("GET", "test.cgi", false, null, null) - login/password are actually sent as "null"/"null"! This affects GWT (Google Web Toolkit) applications.
Created attachment 15479 [details] proposed fix
Comment on attachment 15479 [details] proposed fix r=me
Committed revision 24227.