Fix #14036. Remove user/pass from ajaxLocation. Close gh-1340.

0d68b787 · njhamann · Dave Methvin · dce2edb3 · 0d68b787 · 0d68b787
Commit 0d68b787 authored Aug 24, 2013 by njhamann Committed by Dave Methvin Nov 14, 2013
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 1 deletion

AUTHORS.txt AUTHORS.txt +2 -0

ajax.js src/ajax.js +1 -1

No files found.
--- a/AUTHORS.txt
+++ b/AUTHORS.txt
@@ -176,3 +176,5 @@ Jeremy Dunck <jdunck@gmail.com>
 Chris Price <price.c@gmail.com>
 Guy Bedford <guybedford@gmail.com>
 Amey Sakhadeo <me@ameyms.com>
+Noah Hamann <njhamann@gmail.com>
+
--- a/src/ajax.js
+++ b/src/ajax.js
@@ -21,7 +21,7 @@ var
 	rlocalProtocol = /^(?:about|app|app-storage|.+-extension|file|res|widget):$/,
 	rnoContent = /^(?:GET|HEAD)$/,
 	rprotocol = /^\/\//,
-	rurl = /^([\w.+-]+:)(?:\/\/([^\/?#:]*)(?::(\d+)|)|)/,
+	rurl = /^([\w.+-]+:)(?:\/\/(?:[^\/?#]*@|)([^\/?#:]*)(?::(\d+)|)|)/,

 	/* Prefilters
 	 * 1) They are useful to introduce custom dataTypes (see ajax/jsonp.js for an example)