BugTraq
Re: base64 Sep 23 2003 05:38PM
"Ilya Teterin" (alienhard mail ru)
Erwan David:
> I'll add 5. consider data encoding as broken and return an error.
> The base64 specification specifies how to encode. If you get
> padding character inside data, it's no more base64 encoded data.

The base64 specification specifies how to decode, too. And it specifies how to handle unexpected characters during decoding. Someone... may assume that specification of decoding is complete :-)

Does anyone know product which actually implements (5)?

Most beautiful product was MS Outlook Express. When it meet padding in the first position, it will decode it as "A". In other positions padding will be decoded as "A" too, but some characters from decoded text will be deleted using "pattern" depending on position of padding. I doubt there is content filtering program which implements the SAME way of base64 decoding.

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus