Add an enable-proxy-authentication-forwarding directive
authorFabian Keil <fk@fabiankeil.de>
Thu, 7 Mar 2013 14:08:50 +0000 (14:08 +0000)
committerFabian Keil <fk@fabiankeil.de>
Thu, 7 Mar 2013 14:08:50 +0000 (14:08 +0000)
commitfb813d5783ba4d5607b74785ad94813d2eb186c9
tree41e3e1fd5c96a2bfdee21cfee1181c2e47306119
parent9010c20f84067b07de17b51c9a364b7ad34c9d28
Add an enable-proxy-authentication-forwarding directive

It allows to keep Proxy-Authorization headers in requests
and Proxy-Authenticate headers in responses.

This was previously done by default, but forwarding such
headers potentially allows malicious sites to trick the
user into providing them with login information.

Reported by Chris John Riley.
loadcfg.c
parsers.c
project.h