[Zope-dev] Incorrect Padding?

Chris Withers chrisw@nipltd.com
Mon, 24 Jul 2000 15:28:59 +0100


Steve Alexander wrote:
> My guess is that the argument "auth" passed to validate() has some
> trailing characters. Either that, or WebWhacker passed just "Basic " as
> an auth string.

Yuk, that sounds like a Zope bug. Collector time with patch? A judicious
string.strip should solve the problem, surely?

> Maybe log the auth argument and re-whack your site. (Warning... this is
> certainly a nasty security hole. Be sure to get rid of the logging
> afterwards.)

I didn't whack my site, I just got mailed the error...

Okay, own up, who tried to WebWhack the list archives?! ;-)

cheers,

Chris