Max split once on htauth password. Prevents failure when password contains colon (:)

8 years ago · 7a21d6b5f5
parent 5183c6386a
commit 7a21d6b5f5
1 changed files with 1 additions and 1 deletions
--- a/src/webapp.py
+++ b/src/webapp.py
@ -195,7 +195,7 @@ class ScriptFormWebApp(RequestHandler):
            if auth_header is not None:
                # Validate the username and password
                auth_unpw = auth_header.split(' ', 1)[1]
-                username, password = base64.decodestring(auth_unpw).split(":")
+                username, password = base64.decodestring(auth_unpw).split(":", 1)
                pw_hash = hashlib.sha256(password).hexdigest()

                if username in form_config.users and \