After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 520915 - password in URI
password in URI
Status: RESOLVED DUPLICATE of bug 628430
Product: gvfs
Classification: Core
Component: general
git master
Other Linux
: Normal normal
: ---
Assigned To: gvfs-maint
gvfs-maint
: 568579 568789 593756 (view as bug list)
Depends on:
Blocks:
 
 
Reported: 2008-03-07 05:09 UTC by Yang Hong
Modified: 2012-08-02 08:28 UTC
See Also:
GNOME target: ---
GNOME version: ---


Description Yang Hong 2008-03-07 05:09:59 UTC 
Current ftp backend do not accept password in URI.

ftp://user:password@localhost

Firefox and orignal gnomevfs can login to ftp server with 'user' as user name and 'password' as password, but gvfs treats 'user:password' as user name.

so does sftp://...
Comment 1 Alexander Larsson 2008-03-14 10:37:54 UTC 
I'm not convinced of using passwords in uris should be supported (its a security issue and strongly recommended against in the RFCs), but we should at least remove it from the username instead of breaking like this.
Comment 2 A. Walton 2009-01-23 01:10:30 UTC 
*** Bug 568789 has been marked as a duplicate of this bug. ***
Comment 3 emmeran 2009-01-23 20:50:11 UTC 
I see that it's a security issue, but the user should have the possibility to choose if he wants to risk it. I'd vote for a setting whichs default is to disable password in uri.
Comment 4 Andreas Henriksson 2009-02-12 08:15:07 UTC 
*** Bug 568579 has been marked as a duplicate of this bug. ***
Comment 5 A. Walton 2009-09-01 12:50:35 UTC 
*** Bug 593756 has been marked as a duplicate of this bug. ***
Comment 6 ArtemGr 2009-09-01 13:04:27 UTC 
Currently gvfs-mount does not give any documentation as to how one can pass a password to it. Reading password from a file would make sense. But no, there's only "gvfs-mount [OPTION...] - mount <location>". How one supposed to use FTP if there's no place to put password in.
Comment 7 Felix Möller 2012-08-02 08:26:23 UTC 
This is a duplicate of bug #628430. I think we might mark this as duplicate even though it is older as the other contains more discussion.
Comment 8 Cosimo Cecchi 2012-08-02 08:28:54 UTC 

*** This bug has been marked as a duplicate of bug 628430 ***