zeek/testing/btest/scripts/base/protocols/http/http-basic-auth-colon.zeek
Pierre Lalet 88368ae856 http: fix password capture when enabled
The current implementation would only log, if the password contains a
colon, the part before the first colon (e.g., the password
`password:password` would be logged as `password`).

A test has been added to confirm the expected behaviour.
2024-08-28 21:44:39 +02:00

8 lines
236 B
Text

# Authorization: Basic password has a colon in its value
#
# @TEST-EXEC: zeek -b -r $TRACES/http/basic-auth-with-colon.trace %INPUT
# @TEST-EXEC: btest-diff http.log
@load base/protocols/http
redef HTTP::default_capture_password = T;