Wikimedia Bugzilla is closed!

Part of the rewrite logic in SwiftMedia's wmf/rewrite.py says:
  # if it already has AUTH, presume that it's good. #07
  if req.path.startswith('/auth') or req.path.find('AUTH') >= 0:
     return self.app(env, start_response)

This logic is invalid because image names are allowed to have the four characters AUTH as part of the filename.  For example, http://upload.wikimedia.org/wikipedia/commons/thumb/8/87/Bhartshorne-test-AUTH-image.jpg/240px-Bhartshorne-test-AUTH-image.jpg is an acceptable filename and works with the old system but not via swift.  

SwiftMedia should only skip rewriting if something like AUTH_0123456789abcdef0123456789abcdef is present, not just AUTH.