kraih/mojo — pull request #437 by bduggan (2013-01-04 17:58:48+00:00)
Title: Remove userinfo from base_tag

Hi again (re : github issue 436),

Here's a pull request to remove userinfo from the base_tag helper. This seems like a good security fix; putting userinfo inside a web page means credentials may not only be in caches but also some browsers (firefox 17) actually display the credentials as part of the link destination (on the bottom of the screen). Am happy to bring this up on the mailing list if you think more discussion is warranted.

thanks again
Brian