moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-12-22 08:08:50 -05:00
Code Issues Releases Wiki Activity

serios info leakage!

Browse Source
This commit is contained in:
Daniel Stenberg 2003-08-03 21:33:25 +00:00
parent db9f87f697
commit 296046510b
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
CHANGES
View File

@ -6,6 +6,14 @@
Changelog Changelog
Daniel (3 August)
- When proxy authentication is used in a CONNECT request (as used for all SSL
connects and otherwise enforced tunnel-thru-proxy requests), the same
authentication header is also wrongly sent to the remote host.
This is a rather significant info leak. I've fixed it now and mailed a patch
and warning to the mailing lists.
Daniel (1 August) Daniel (1 August)
- David Byron provided a patch to make 7.10.6 build correctly with the - David Byron provided a patch to make 7.10.6 build correctly with the
compressed hugehelp.c source file. compressed hugehelp.c source file.