blinding: Use . as separator rather than / (which ends up as %2e)

Signed-off-by: Ian Jackson <Ian.Jackson@eu.citrix.com>

diff --git a/cgi-auth-flexible.pm b/cgi-auth-flexible.pm
index b4985cacb099d3109c6f7d75eaa35204517e8c23..a661618067278c8b3099bc846603e34a617f0b19 100644 (file)
--- a/cgi-auth-flexible.pm
+++ b/cgi-auth-flexible.pm
@@ -1185,13 +1185,13 @@ sub _blind ($$) {
     my $mask = $r->_random(($l+1)>>1);
     $mask = substr $mask, 0, $l;
     my $blound = $r->_blind_combine($in, $mask);
     my $mask = $r->_random(($l+1)>>1);
     $mask = substr $mask, 0, $l;
     my $blound = $r->_blind_combine($in, $mask);

-    return "$blound/$mask";
+    return "$blound.$mask";

 }
 
 sub _unblind ($$) {
     my ($r, $in) = @_;
     return $in unless $in;
 }
 
 sub _unblind ($$) {
     my ($r, $in) = @_;
     return $in unless $in;

-    my ($blound,$mask) = ($in =~ m#^(.*)/([0-9a-f]+)$#) or die "$in ?";
+    my ($blound,$mask) = ($in =~ m#^(.*)\.([0-9a-f]+)$#) or die "$in ?";

     my $l = $r->_blind_len($blound);
     $l == length($mask) or die "$in ?";
     return $r->_blind_combine($blound, $mask);
     my $l = $r->_blind_len($blound);
     $l == length($mask) or die "$in ?";
     return $r->_blind_combine($blound, $mask);