mirror of
https://github.com/moparisthebest/curl
synced 2024-12-22 08:08:50 -05:00
avoid proxy (and other) auth if no user+password is given
This commit is contained in:
parent
40e6b12cca
commit
7410210f19
@ -196,8 +196,10 @@ CURLcode http_auth_headers(struct connectdata *conn,
|
||||
if(!data->state.authstage) {
|
||||
if(conn->bits.httpproxy && conn->bits.proxy_user_passwd)
|
||||
Curl_http_auth_stage(data, 407);
|
||||
else
|
||||
else if(conn->bits.user_passwd)
|
||||
Curl_http_auth_stage(data, 401);
|
||||
else
|
||||
return CURLE_OK; /* no authentication with no user or password */
|
||||
}
|
||||
|
||||
/* To prevent the user+password to get sent to other than the original
|
||||
|
Loading…
Reference in New Issue
Block a user