Prevent NPE thrown in getAuthorizationPolicyFromMessage for authorization header values with length less than 4, patch from emswbandara applied, This closes
@@ -174,6 +174,10 @@ public abstract class AbstractHTTPDestination
try {
byte[] authBytes = Base64Utility.decode(authEncoded);
+ if (authBytes == null) {
+ throw new Base64Exception(new Throwable("Invalid Base64 data."));
+ }
+
String authDecoded = decodeBasicAuthWithIso8859
? new String(authBytes, StandardCharsets.ISO_8859_1) : new String(authBytes);
