rem: var ga = [type, args.url, (args.sync !== true)]; if(args.user){ ga.push(args.user, args.password); } ao.xhr.open.apply(ao.xhr, ga); 
add:      ao.xhr.open(type, args.url, (args.sync !== true), (args.user ? args.user : undefined), (args.password ? args.password: undefined)); 
context: 	var _doIt = function(type, args, ao){		var ga = [type, args.url, (args.sync !== true)];		if(args.user){ ga.push(args.user, args.password); }		ao.xhr.open.apply(ao.xhr, ga);		// FIXME: is this appropriate for all content types?		ao.xhr.setRequestHeader("Content-Type", (args.contentType||_defaultContentType));		// FIXME: set other headers here!		try{			ao.xhr.send(args._query);		}catch(e){			ao.d.cancel();		}		_launch(ao);		return ao.d;	}
meta: 4497	/local1/tlutelli/issta_data/temp/all_js/javascript/2007_temp/2007/4497/c1b082d59146767def1885815f4aa3c2d9d8ff80/xhr.js/buggy/_base/xhr.js