Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

[Messenger] decode URL-encoded characters in DSN's usernames/passwords breaks authentication in case of + used #47788

Copy link
Copy link
Closed
@sidz

Description

@sidz
Issue body actions

Symfony version(s) affected

4.4.

Description

Looks like #47533 breaks AMQP authentication (I suppose redis is affected as well) in case password contains + sign.

urldecode documentations says: "Decodes any %## encoding in the given string. Plus symbols ('+') are decoded to a space character."

Also I suppose that password may have any of %## characters.

How to reproduce

Set + sign as part of password and it will be replaced with space.

Possible Solution

Remove urldecode at least from password option

Additional Context

No response

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      Morty Proxy This is a proxified and sanitized view of the page, visit original site.