Correctly extract username/password from URL

7 years ago · 8a136d18e5
parent 065b662d5b
commit 8a136d18e5
1 changed files with 1 additions and 1 deletions
--- a/src/Composer/Util/RemoteFilesystem.php
+++ b/src/Composer/Util/RemoteFilesystem.php
@ -224,7 +224,7 @@ class RemoteFilesystem
        $this->redirects = 1; // The first request counts.

        // capture username/password from URL if there is one
-        if (preg_match('{^https?://(.+):(.+)@([^/]+)}i', $fileUrl, $match)) {
+        if (preg_match('{^https?://([^:]+):([^@]+)@([^/]+)}i', $fileUrl, $match)) {
            $this->io->setAuthentication($originUrl, urldecode($match[1]), urldecode($match[2]));
        }