[X2Go-Commits] [x2gobroker] 01/01: Don't strip off spaces from password strings. (Fixes: #716).

[git-admin at x2go.org]

This is an automated email from the git hooks/post-receive script.

x2go pushed a commit to branch master
in repository x2gobroker.

commit bc47e33351c852d720d4e532f5c0aa431d834396
Author: Mike Gabriel <mike.gabriel at das-netzwerkteam.de>
Date:   Mon Jan 5 11:04:36 2015 +0100

    Don't strip off spaces from password strings. (Fixes: #716).
---
 debian/changelog        |    1 +
 x2gobroker/web/json.py  |    2 +-
 x2gobroker/web/plain.py |    2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index e054d03..b6fab83 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -300,6 +300,7 @@ x2gobroker (0.0.3.0-0x2go1) UNRELEASED; urgency=low
   * New upstream version (0.0.3.0):
     - Handle spaces in broker login passwords when authservice is used. (Fixes:
       #706).
+    - Don't strip off spaces from password strings. (Fixes: #716).
 
  -- Mike Gabriel <mike.gabriel at das-netzwerkteam.de>  Fri, 07 Jun 2013 23:25:30 +0200
 
diff --git a/x2gobroker/web/json.py b/x2gobroker/web/json.py
index 1895e00..a5c6fc0 100644
--- a/x2gobroker/web/json.py
+++ b/x2gobroker/web/json.py
@@ -106,7 +106,7 @@ class X2GoBrokerWeb(_RequestHandler):
             raise tornado.web.HTTPError(404)
 
         username = self.get_argument('user', default='')
-        password = self.get_argument('password', default='')
+        password = self.get_argument('password', default='', strip=False)
         cookie = self.get_argument('authid', default='')
         pubkey = self.get_argument('pubkey', default='')
         task = self.get_argument('task', default='')
diff --git a/x2gobroker/web/plain.py b/x2gobroker/web/plain.py
index ed706f5..3bc6266 100644
--- a/x2gobroker/web/plain.py
+++ b/x2gobroker/web/plain.py
@@ -102,7 +102,7 @@ class X2GoBrokerWeb(_RequestHandler):
             raise tornado.web.HTTPError(404)
 
         username = self.get_argument('user', default='')
-        password = self.get_argument('password', default='')
+        password = self.get_argument('password', default='', strip=False)
         cookie = self.get_argument('authid', default='')
         pubkey = self.get_argument('pubkey', default='')
         task = self.get_argument('task', default='')

--
Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2gobroker.git