Bug 108387

Summary: [BlackBerry] proxy credentials can be overwritten
Product: WebKit Reporter: Joe Mason <joenotcharles>
Component: Page LoadingAssignee: Joe Mason <joenotcharles>
Status: RESOLVED FIXED    
Severity: Normal CC: mifenton, rwlbuis, tonikitoo, webkit.review.bot, yong.li.webkit
Priority: P2    
Version: 528+ (Nightly build)   
Hardware: Unspecified   
OS: Unspecified   
Attachments:
Description Flags
workaround none

Description Joe Mason 2013-01-30 14:48:36 PST 
There is a code path that can cause NetworkJob::storeCredentials to be called with empty credentials, causing the existing credentials to be overwritten even though authentication succeeded.  (This happens when the proxy credentials are read from the system settings in the network layer rather than in webkit.) Internal PR 287791 has been filed to investigate why this happens; in the meantime, ignore empty credentials as a workaround.
Comment 1 Joe Mason 2013-01-30 14:50:22 PST 
Created attachment 185585 [details]
workaround
Comment 2 Yong Li 2013-01-30 15:03:19 PST 
Comment on attachment 185585 [details]
workaround

r+ based on Leo's review
Comment 3 WebKit Review Bot 2013-01-30 16:04:40 PST 
Comment on attachment 185585 [details]
workaround

Clearing flags on attachment: 185585

Committed r141336: <http://trac.webkit.org/changeset/141336>
Comment 4 WebKit Review Bot 2013-01-30 16:04:43 PST 
All reviewed patches have been landed.  Closing bug.