Add a SafeHttpServer shim to work around issue 9140.

utils/pub/oauth2.dart

 // Copyright (c) 2012, the Dart project authors.  Please see the AUTHORS file
 // for details. All rights reserved. Use of this source code is governed by a
 // BSD-style license that can be found in the LICENSE file.
 
 library oauth2;
 
 import 'dart:async';
 import 'dart:io';
 import 'dart:uri';
 
 // TODO(nweiz): Make this a "package:" URL, or something nicer than this.
 import '../../pkg/oauth2/lib/oauth2.dart';
 import '../../pkg/pathos/lib/path.dart' as path;
 
 import 'http.dart';
 import 'io.dart';
 import 'log.dart' as log;
+import 'safe_http_server.dart';
 import 'system_cache.dart';
 import 'utils.dart';
 
 export '../../pkg/oauth2/lib/oauth2.dart';
 
 /// The pub client's OAuth2 identifier.
 final _identifier = '818368855108-8grd2eg9tj9f38os6f1urbcvsq399u8n.apps.'
     'googleusercontent.com';
 
 /// The pub client's OAuth2 secret. This isn't actually meant to be kept a
@@ skipping 136 matching lines @@
   var grant = new AuthorizationCodeGrant(
       _identifier,
       _secret,
       authorizationEndpoint,
       tokenEndpoint,
       httpClient: httpClient);
 
   // Spin up a one-shot HTTP server to receive the authorization code from the
   // Google OAuth2 server via redirect. This server will close itself as soon as
   // the code is received.
-  return HttpServer.bind('127.0.0.1', 0).then((server) {
+  return SafeHttpServer.bind('127.0.0.1', 0).then((server) {
     var authUrl = grant.getAuthorizationUrl(
         Uri.parse('http://localhost:${server.port}'), scopes: _scopes);
 
     log.message(
         'Pub needs your authorization to upload packages on your behalf.\n'
         'In a web browser, go to $authUrl\n'
         'Then click "Allow access".\n\n'
         'Waiting for your authorization...');
     return server.first.then((request) {
       var response = request.response;
@@ skipping 14 matching lines @@
         response.statusCode = 404;
         response.close();
       }
     });
   })
   .then((client) {
     log.message('Successfully authorized.\n');
     return client;
   });
 }