Skip to content

Missing devaluation for Syntax character #35

Description

@RiRomain

I was unable to connect to my broker HBCI server, and that was because my password contained the character @.

According to the standard, all syntax character need to be devaluated (escaped) with character ?
For example the password 1234@bcd need to be replaced by 1234?@bcd

If not escaped with the character ?, the bank parser evaluate the password as binary data and cannot process the message.

This behaviour is specified under Point H.1.3 Entwertung in FinTS_3.0_Formats.pdf

The syntax character are the following: + : ' ? @ (Point H.1.1 Syntaxzeichen in FinTS_3.0_Formats.pdf)

They also include 2 example
Before:
Taschengeld für Hans + Franz
After:
Taschengeld für Hans ?+ Franz

Before
Ist das so richtig??
After
Ist das so richtig????

Activity

  1. raphaelm commented on Jul 31, 2018

    @raphaelm
    Owner

    We have an escape method that apparently does not escape the @: https://github.com/raphaelm/python-fints/blob/master/fints/utils.py#L21

  2. RiRomain commented on Jul 31, 2018

    @RiRomain
    ContributorAuthor

    Arf I'm really unlucky ^^ any reason for this method to not escape the @?

  3. raphaelm commented on Aug 7, 2018

    @raphaelm
    Owner

    No, feel free to fix it :) When @henryk is done with his work in #34 and we're then also rewriting our protocol generation, it won't be neccessary any longer, but that might take some time.

  4. RiRomain commented on Aug 7, 2018

    @RiRomain
    ContributorAuthor

    Ok, I'll open a pull request :-)

  5. RiRomain commented on Aug 7, 2018

    @RiRomain
    ContributorAuthor
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions