Sanity check of the username.

" can not be allowed in usernames until the digest helper protocol
have been redone

diff --git a/src/auth/digest/auth_digest.cc b/src/auth/digest/auth_digest.cc
index ff6fa09d2cd61c76773035c031e325272656819e..10c335fe7a2890576313f93ed2d247b31f09b0f9 100644 (file)
--- a/src/auth/digest/auth_digest.cc
+++ b/src/auth/digest/auth_digest.cc
@@ -1236,6 +1236,15 @@ AuthDigestConfig::decode(char const *proxy_auth)
         return authDigestLogUsername(username, digest_request);
     }
 
+    /* Sanity check of the username.
+     * " can not be allowed in usernames until * the digest helper protocol
+     * have been redone
+     */
+    if (strchr(username, '"')) {
+        debugs(29, 2, "authenticateDigestDecode: Unacceptable username '" << username << "'");
+        return authDigestLogUsername(username, digest_request);
+    }
+
     /* do we have a realm ? */
     if (!digest_request->realm || digest_request->realm[0] == '\0') {
         debugs(29, 2, "authenticateDigestDecode: Empty or not present realm");