Fix #14036. Remove user/pass from ajaxLocation. Close gh-1340.

(cherry picked from commit eb1a2afc9fb1d990d10358aab0e17bc0ce1d1db3)

diff --git a/AUTHORS.txt b/AUTHORS.txt
index 74a1b912bf48610422a0223a35a3f21cb2e5a21d..b2d21df4627cd157107e44ee5b8b7206f773ea60 100644 (file)
--- a/AUTHORS.txt
+++ b/AUTHORS.txt
@@ -172,3 +172,4 @@ Terry Jones <terry@jon.es>
 Jeremy Dunck <jdunck@gmail.com>
 Chris Price <price.c@gmail.com>
 Amey Sakhadeo <me@ameyms.com>
+Noah Hamann <njhamann@gmail.com>

diff --git a/src/ajax.js b/src/ajax.js
index 174e8274dafab0ed1b2aa6449060f6f7840b4559..1b01fd6a5474dcd7717697dbe0290338d712d000 100644 (file)
--- a/src/ajax.js
+++ b/src/ajax.js
@@ -21,7 +21,7 @@ var
        rlocalProtocol = /^(?:about|app|app-storage|.+-extension|file|res|widget):$/,
        rnoContent = /^(?:GET|HEAD)$/,
        rprotocol = /^\/\//,
-       rurl = /^([\w.+-]+:)(?:\/\/([^\/?#:]*)(?::(\d+)|)|)/,
+       rurl = /^([\w.+-]+:)(?:\/\/(?:[^\/?#]*@|)([^\/?#:]*)(?::(\d+)|)|)/,
 
        /* Prefilters
         * 1) They are useful to introduce custom dataTypes (see ajax/jsonp.js for an example)