Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bad URI with complex passwords #88

Open
ecozijnss opened this issue Apr 26, 2018 · 3 comments
Open

bad URI with complex passwords #88

ecozijnss opened this issue Apr 26, 2018 · 3 comments

Comments

@ecozijnss
Copy link

when parsing complex passwords most plugins return bad URI while curl -v gets the content without a probelm.
the problem part in the password is:
Check failed to run: bad URI(is not URI?): http://admin:4L#*!1@logging-rabbitmq-0***.***.com:15672/api/queues/

@monkey670
Copy link
Contributor

monkey670 commented May 11, 2018

This looks like its related to an open PR with the underlying carrot-top function https://github.com/portertech/carrot-top/pull/8. Unfortunately the project looks to have gone stale. Maybe we could CGI.escape(password) the string before we pass it to the carrot-top functionality.

@matthewbretten
Copy link

matthewbretten commented Apr 5, 2019

That won't work because carrot-top parses the URI and would use the URL-encoded password as a parameter for Basic Auth, which then leads to a 401 as the password isn't correct and needs to be unescaped.
You can see this here:
https://github.com/portertech/carrot-top/blob/master/lib/carrot-top.rb#L48

So this issue requires carrot-top to be updated or for this plugin to use something else, preferably the latter given the lack of updates to carrot-top.

@Otoru
Copy link

Otoru commented Dec 7, 2020

Checking the project, I saw that the carrot-top hasn't received updates since 2012. Bearing that in mind, would it be valid to apply a cleaning of the uri parameters right here?
I thought about trying something like this and submitting a PR in this repository, but I would like to know if it is something valid.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants