mirror of
https://github.com/jupyterhub/jupyterhub.git
synced 2025-10-13 04:53:01 +00:00
Do not consider `@' character url-safe
Usernames that have an `@'-separated domain component break JupyterHub when the server expects to see query strings that contain an `@', when browsers and other clients send `%40'.
This commit is contained in:
@@ -146,7 +146,7 @@ class User(HasTraits):
|
|||||||
@property
|
@property
|
||||||
def escaped_name(self):
|
def escaped_name(self):
|
||||||
"""My name, escaped for use in URLs, cookies, etc."""
|
"""My name, escaped for use in URLs, cookies, etc."""
|
||||||
return quote(self.name, safe='@')
|
return quote(self.name, safe='')
|
||||||
|
|
||||||
@gen.coroutine
|
@gen.coroutine
|
||||||
def spawn(self, options=None):
|
def spawn(self, options=None):
|
||||||
|
Reference in New Issue
Block a user