From 0b82926a7f6c342f5942fb8e7181791460a3267e Mon Sep 17 00:00:00 2001 From: Magnus Ahltorp Date: Fri, 27 Feb 2015 13:51:09 +0100 Subject: Verify raw query string instead of parsed --- src/catlfish_web.erl | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/catlfish_web.erl b/src/catlfish_web.erl index 0518597..5ee5743 100644 --- a/src/catlfish_web.erl +++ b/src/catlfish_web.erl @@ -25,7 +25,8 @@ loop(Req, Module) -> case Req:get(method) of 'GET' -> Query = Req:parse_qs(), - Result = case http_auth:verify_auth(AuthHeader, "GET", "/" ++ Path, Query) of + {_, RawQuery, _} = mochiweb_util:urlsplit_path(Req:get(raw_path)), + Result = case http_auth:verify_auth(AuthHeader, "GET", "/" ++ Path, RawQuery) of failure -> {403, [{"Content-Type", "text/plain"}], "Invalid credentials"}; success -> -- cgit v1.1