Do not consider `@' character url-safe

Usernames that have an `@'-separated domain component
break JupyterHub when the server expects to see query
strings that contain an `@', when browsers and other
clients send `%40'.
This commit is contained in:
Jonathon Anderson
2016-02-24 16:48:23 -07:00
parent 097d883905
commit fc49aac02b

View File

@@ -146,7 +146,7 @@ class User(HasTraits):
@property @property
def escaped_name(self): def escaped_name(self):
"""My name, escaped for use in URLs, cookies, etc.""" """My name, escaped for use in URLs, cookies, etc."""
return quote(self.name, safe='@') return quote(self.name, safe='')
@gen.coroutine @gen.coroutine
def spawn(self, options=None): def spawn(self, options=None):