diff options
| author | Danilo M. <danix@danix.xyz> | 2026-11-03 19:13:36 +0100 |
|---|---|---|
| committer | Danilo M. <danix@danix.xyz> | 2026-11-03 19:13:36 +0100 |
| commit | 89ec8dc13b03af9f7b74a82d187b9bee3c444925 (patch) | |
| tree | 68062dcacd8b36666be302e2abc3e441b3ad791e /app/src/test/java/dev | |
| parent | cebdf8dd4720388d56d9af537fe81fd927e51779 (diff) | |
| download | HardenedPass-89ec8dc13b03af9f7b74a82d187b9bee3c444925.tar.gz HardenedPass-89ec8dc13b03af9f7b74a82d187b9bee3c444925.zip | |
fix(app): validate the proxy fully and keep its password out of properties
- A host with an empty port was saved, but ProxySelector treats port -1
as no proxy, so git silently connected directly. The port is now
required while a host is set.
- Patterns.WEB_URL accepted "http://proxy.example.org:3128/" as a host,
which then broke every HTTPS operation. The host must be a numeric
address or a plain domain name, without scheme, port or path.
- setDefaultProxy copied the proxy password into the process-wide
http.proxyPassword system property. The Authenticator already supplies
the credentials, so the properties are only cleared now.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to 'app/src/test/java/dev')
0 files changed, 0 insertions, 0 deletions
