serios info leakage!

This commit is contained in:
Daniel Stenberg 2003-08-03 21:33:25 +00:00
parent db9f87f697
commit 296046510b
1 changed files with 8 additions and 0 deletions

View File

@ -6,6 +6,14 @@
Changelog
Daniel (3 August)
- When proxy authentication is used in a CONNECT request (as used for all SSL
connects and otherwise enforced tunnel-thru-proxy requests), the same
authentication header is also wrongly sent to the remote host.
This is a rather significant info leak. I've fixed it now and mailed a patch
and warning to the mailing lists.
Daniel (1 August)
- David Byron provided a patch to make 7.10.6 build correctly with the
compressed hugehelp.c source file.