Bug 30050 - Authentication with invalid/unknown Header crash Browser
Summary: Authentication with invalid/unknown Header crash Browser
Status: RESOLVED INVALID
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebCore Misc. (show other bugs)
Version: 528+ (Nightly build)
Hardware: Mac (Intel) OS X 10.6
: P2 Critical
Assignee: Nobody
URL: http://username:password@www.blar.de/...
Keywords:
Depends on:
Blocks:
 
Reported: 2009-10-03 16:11 PDT by Andreas
Modified: 2009-10-03 22:33 PDT (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas 2009-10-03 16:11:35 PDT
Authentication with invalid/unknown values in Header "WWW-Authenticate" crash Browser

Code
<?php

header('HTTP/1.1 401 Unauthorized');
header('WWW-Authenticate: Basic Invalid');

?>

Example: http://username:password@www.blar.de/webkit/auth.php
Comment 1 Mark Rowe (bdash) 2009-10-03 22:33:19 PDT
Thanks for the bug report.  However, the crash log indicates that the problem occurs outside of WebKit in a Mac OS X system framework that it uses.  You should report this bug to Apple at <http://bugreport.apple.com/> so it can be investigated.

This bug report will be closed as INVALID to indicate that the problem is outside of WebKit.