Description
There is no valid reason that I can think of to allow userinfo in a URL for an application/UI that is participating in KnoxSSO. The userinfo is used to login to hosts/pages that are protected by HTTP Basic. This is contradictory to the use of KnoxSSO to begin with and complicates the regex pattern required to indicate those URLs that are allowed for redirect and/or dispatch.
Attachments
Issue Links
- links to