-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Proper escaping of ext data #1
Comments
Using 1.3 - It looks like the HawkContext builder doesn't allow quotes in the ext-data, but that AuthorisationHeader builder does. For valid input ext data
should be valid. This means supporting both quotes, escaped quotes, and other escape characters. |
But as a work-around, I'm just going to URL Encode my json payload |
If you need it, I can fix that. I had other issues I wasn't sure how to solve best (in the C-lib), hence escaping was deferred. How urgent is the fix? Jan |
As it turned out, I needed to URL encode the data anyway. So no urgency on the fix at all. Nick
|
Currently, ext data ist not escaped correctly when added to the HMAC base string or header strings.
The text was updated successfully, but these errors were encountered: