symfony/symfony — pull request #5464 by Vincent-Simonin (2012-09-07 15:24:57+00:00)
Title: [Security] Fixed digest authentication

Bug fix: yes
Feature addition: no
Backwards compatibility break: no
Symfony2 tests pass: yes
Fixes the following tickets: -
Todo: -
License of the code: MIT
Documentation PR: -

Digest authentication fail if digest parameters contains `=` character or `, ` string.

Example of digest authorization string which fail :

username="user", realm="Welcome, robot!", nonce="MTM0NzMyMTgyMy42NzkzOmRlZjM4NmIzOGNjMjE0OWJiNDU0MDAxNzJmYmM1MmZl", uri="/path/info?p1=5&p2=5", cnonce="MDIwODkz", nc=00000001, qop="auth", response="a27542383c147b9270c75328f9866877"