Uploaded image for project: 'Magnolia'
  1. Magnolia
  2. MAGNOLIA-5747

Blank username (e.g. from basic auth headers) throws exception

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Do
    • Icon: Minor Minor
    • None
    • 4.5.13, 5.2.3
    • core, security
    • None

      Simple patch to add a guard statement for blank user names in MgnlUserManager::getUser(). A misconfigured external script using basic auth without providing a user name was filling up our log files.

      On 4.5.x the error messages are using e.printStackTrace instead of a logger, meaning we can't silence them. It looks like that has been remedied in 5.x, though.

        Acceptance criteria

          1. blank_name.patch
            0.8 kB

              Unassigned Unassigned
              cj32@txstate.edu Charles Jones
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved:

                  Bug DoR
                  Task DoD