'Analyze a 200 response and report any findings of http://user:pass@domain.com/
:return: None'

def _find_auth_uri(self, response):

    if (('@' in response.get_uri()) and self._auth_uri_regex.match(response.get_uri().url_string)):
        desc = 'The    resource:    "%s"    has    a    user    and    password    in    the    URI.'
        desc = (desc % response.get_uri())
        v = Vuln('Basic    HTTP    credentials', desc, severity.HIGH, response.id, self.get_name())
        v.set_url(response.get_url())
        v.add_to_highlight(response.get_uri().url_string)
        kb.kb.append(self, 'userPassUri', v)
        om.out.vulnerability(v.get_desc(), severity=v.get_severity())
    url_list = []
    try:
        DocumentParser = parser_cache.dpc.get_document_parser_for(response)
    except BaseFrameworkException as w3:
        msg = ('Failed    to    find    a    suitable    document    parser.    Exception:    ' + str(w3))
        om.out.debug(msg)
    else:
        (parsed_references, re_references) = DocumentParser.get_references()
        url_list.extend(parsed_references)
        url_list.extend(re_references)
    for url in url_list:
        if (('@' in url.url_string) and self._auth_uri_regex.match(url.url_string)):
            desc = 'The    resource:    "%s"    has    a    user    and    password    in    the    body.    The    offending    URL    is:    "%s".'
            desc = (desc % (response.get_url(), url))
            v = Vuln('Basic    HTTP    credentials', desc, severity.HIGH, response.id, self.get_name())
            v.set_url(response.get_url())
            v.add_to_highlight(url.url_string)
            kb.kb.append(self, 'userPassUri', v)
            om.out.vulnerability(v.get_desc(), severity=v.get_severity())
