bugGNU Wget - Bugs: bug #34141, Username/password embedded in URL...

 
 

bug #34141: Username/password embedded in URL no longer accepted (wget 1.13)

Submitted by:  Andrew Benham <adsb>
Submitted on:  Fri 26 Aug 2011 02:52:36 PM UTC  
 
Category: User InterfaceSeverity: 3 - Normal
Priority: 5 - NormalStatus: None
Privacy: PublicAssigned to: None
Originator Name: Andrew BenhamOpen/Closed: Open
Release: trunkOperating System: GNU/Linux
Reproducibility: Every TimeFixed Release: None
Planned Release: NoneRegression: None
Work Required: NonePatch Included: None

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri 26 Aug 2011 02:52:36 PM UTC, original submission:

Using wget version 1.13 on a Debian system, I can no longer use an HTTP URL of the form:

http://user:password@host.name/localpart

On wget 1.12 (and previous versions of wget going back for many years), I can do:

wget -O- -q http://admin:SECRET@192.168.1.254/stattbl.htm | sed -e '1,90d'

with success (reads the current ADSL stats from a Netgear router/modem, if you're interested). I get HTML to STDOUT.

With wget 1.13, I get:

wget -O- -d http://admin:SECRET@192.168.1.254/stattbl.htm
DEBUG output created by Wget 1.13 on linux-gnu.

URI encoding = `UTF-8'
--2011-08-26 15:42:07-- http://admin:password*@192.168.1.254/stattbl.htm
Connecting to 192.168.1.254:80... connected.
Created socket 3.
Releasing 0x08a81100 (new refcount 0).
Deleting unused 0x08a81100.

---request begin---
GET /stattbl.htm HTTP/1.1
User-Agent: Wget/1.13 (linux-gnu)
Accept: /
Host: 192.168.1.254
Connection: Keep-Alive

---request end---
HTTP request sent, awaiting response...
---response begin---
HTTP/1.1 401 Unauthorized
Server:
Date: Fri, 26 Aug 2011 14:42:06 GMT
Content-Type: text/html
Connection: close

---response end---
401 Unauthorized
Registered socket 3 for persistent reuse.
] done.
Unknown authentication scheme.
Authorization failed.

The man page suggests (in the --http-user section) that this should still work. I can use --user and --password as a workaround, but wonder if the change in behaviour was intentional.

Andrew Benham <adsb>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by adsb (Submitted the item)
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    No Changes Have Been Made to This Item

    Back to the top


    Powered by Savane 3.1-cleanup