Bug in IE - characters are cut out of the password?

C

charliez2012-07-02 17:39:22

Microsoft

charliez, 2012-07-02 17:39:22

Folks, is it buggy or does IE really mess up with http authorization if the password contains the "-" character?
How to repeat the problem: password the directory,

$ cat .htaccess 
AuthType Basic
AuthName test"
AuthUserFile /home/charliez/www/test/pass.txt
<Limit GET>
require valid-user
</Limit>

set user test password DT-0317-5776

$ /usr/local/apache/bin/htpasswd pass.txt test
New password: 
Re-type new password: 
Updating password for user test

try to log in to IE. I tried version 8 and 9, on different computers, on different web servers - authorization does not pass. In other browsers everything is ok. I did Apache process tracing - a request comes from other browsers:
GET /test/ HTTP/1.0\r\nHost: charlie.aha.ru\r\nAuthorization: Basic dGVzdDpEVC0wMzE3LTU3NzY=
From IE comes:
GET /test/ HTTP/1.0\r\ nHost: charlie.aha.ru\r\nAuthorization: Basic dGVzdDo=
If we decode from base64, we get "test:" - as if we didn't enter the password.
You can poke here:
charlie.aha.ru/test/
charliez.ru/test/
user test password DT-0317-5776
Who can repeat the problem in IE?
UPDApparently, the problem exists in the corporate seven. If anyone has a corporate party installed, please test it!

Reply

Answer the question

In order to leave comments, you need to log in

6 answer(s)

L

LightSUN, 2012-07-02
@LightSUN

Win7 x64, IE8 - OK

F

freeek, 2012-07-02
@freeek

I have everything OK under XP Mode in the 6th.
In IE Testere 7,8,9 - also OK.

A

adminimus, 2012-07-02
@adminimus

win7 x86, IE 9 OK

D

demimurych, 2012-07-02
@demimurych

And try to shorten the same password to 8 characters.
and try again.

D

Dragonizer, 2012-07-02
@Dragonizer

Win7HP x64 with IE9 and IE9 (x64) browsers - OK.

E

egorinsk, 2012-07-02
@egorinsk

Proxy/firewall/antivirus disabled during testing? Often corporate/proprietary firewalls break standards and cut headers just in the path.