Authorization through URL no longer supported

[VJ]

I am trying to bypass basic authentication login prompt
programmatically.

Till last week I was using
https://username:password@servername technique to do that,
But after Microsoft latest security update for Internet
Explorer (832894), Passing login credentials through URL
is not longer supported. It displays 'Page not found'
error.

As per RFC:2617 ftp://ftp.isi.edu/in-notes/rfc2617.txt, if
we pass 'Authorization' header with 'basic
usernameassword' (base64 encoded string) value, It
should not prompt login dialog box. Anybody knows if
Internet Explorer supports this or not? if yes, How do I
send this header from Internet Explorer client side
script ? Or where can I get heads up for this ?

I checked through visual basic for web browser control, &
it works, ex :

WebBrowser1.Navigate "http://servername/test.asp", , , , "A
uthorization:Basic cGRwL9pZDE6cGFzc3dvcmQ="

Can I do similar through Internet Explorer client side
script ?

Any help is highly appreciated.

Thanks You,

VJ
..

 

[Robert Aldwinckle]

where can I get heads up for this ?

There are some MSDN links in this article which may help you:

<TITLE>834489 - A security update is available that modifies the default behavior of Internet Explorer for handling user information
in HTTP and in HTTPS URLs</TITLE>