Fix #14036. Remove user/pass from ajaxLocation. Close gh-1340.

diff --git a/AUTHORS.txt b/AUTHORS.txt
index 01bb1f804c0a392e24195792c1c045b92e29b5c7..04e0542dd01f14e661bc92ea6da891d7e99ad833 100644 (file)
--- a/AUTHORS.txt
+++ b/AUTHORS.txt
@@ -176,3 +176,5 @@ Jeremy Dunck <jdunck@gmail.com>
 Chris Price <price.c@gmail.com>
 Guy Bedford <guybedford@gmail.com>
 Amey Sakhadeo <me@ameyms.com>
+Noah Hamann <njhamann@gmail.com>
+

diff --git a/src/ajax.js b/src/ajax.js
index 15a5e9d3b430aa0b0764da35b05e4b9572c8f200..d39de2a9b3d9924fa2f463c6b96473499e09edd6 100644 (file)
--- a/src/ajax.js
+++ b/src/ajax.js
@@ -21,7 +21,7 @@ var
        rlocalProtocol = /^(?:about|app|app-storage|.+-extension|file|res|widget):$/,
        rnoContent = /^(?:GET|HEAD)$/,
        rprotocol = /^\/\//,
-       rurl = /^([\w.+-]+:)(?:\/\/([^\/?#:]*)(?::(\d+)|)|)/,
+       rurl = /^([\w.+-]+:)(?:\/\/(?:[^\/?#]*@|)([^\/?#:]*)(?::(\d+)|)|)/,
 
        /* Prefilters
         * 1) They are useful to introduce custom dataTypes (see ajax/jsonp.js for an example)