New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

'Negotiate' without blank #2

Open

fjf2002 opened this issue Jul 27, 2021 · 0 comments

fjf2002 commented Jul 27, 2021

On line 13, it is not really verified that the token 'Negotiate' is followed by a blank:

express-auth-negotiate/src/index.js

Line 13 in 5b274a4

if (auth.lastIndexOf('Negotiate') !== 0) {

... but here it is assumed:

express-auth-negotiate/src/index.js

Line 18 in 5b274a4

req.auth.token = auth.substring('Negotiate '.length);

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment