xattr: strip credentials from any URL that is stored

Both user and password are cleared uncondtitionally.

Added unit test 1621 to verify.

Fixes #3423
Closes #3433
This commit is contained in:
Daniel Stenberg 2019-01-02 20:18:27 +01:00
parent afeb8d9902
commit 98e6629154
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
5 changed files with 177 additions and 10 deletions

View file

@ -182,7 +182,7 @@ test1560 test1561 test1562 \
test1590 test1591 test1592 \
\
test1600 test1601 test1602 test1603 test1604 test1605 test1606 test1607 \
test1608 test1609 test1620 \
test1608 test1609 test1620 test1621 \
\
test1650 test1651 test1652 test1653 \
\

27
tests/data/test1621 Normal file
View file

@ -0,0 +1,27 @@
<testcase>
<info>
<keywords>
unittest
stripcredentials
</keywords>
</info>
#
# Client-side
<client>
<server>
none
</server>
<features>
unittest
https
</features>
<name>
unit tests for stripcredentials from URL
</name>
<tool>
unit1621
</tool>
</client>
</testcase>