dgaudet 98/02/22 23:58:46
Modified: src CHANGES
src/main util_script.c
Log:
hide Proxy-Authorization just like Authorization is hidden
Submitted by: Alvaro Martinez Echevarria <[EMAIL PROTECTED]>
Reviewed by: Martin Kraemer, Ian Kluft, Dean Gaudet
Revision Changes Path
1.657 +3 -0 apache-1.3/src/CHANGES
Index: CHANGES
===================================================================
RCS file: /export/home/cvs/apache-1.3/src/CHANGES,v
retrieving revision 1.656
retrieving revision 1.657
diff -u -r1.656 -r1.657
--- CHANGES 1998/02/22 20:52:22 1.656
+++ CHANGES 1998/02/23 07:58:42 1.657
@@ -1,5 +1,8 @@
Changes with Apache 1.3b6
+ *) Hide Proxy-Authorization from CGI/SSI/etc just like Authorization is
+ hidden. [Alvaro Martinez Echevarria]
+
*) Apache will, when started with the -X (single process) debugging flag,
honor the SIGINT or SIGQUIT signals again now. This capability got lost
a while ago during OS/2 signal handling changes.
1.97 +2 -1 apache-1.3/src/main/util_script.c
Index: util_script.c
===================================================================
RCS file: /export/home/cvs/apache-1.3/src/main/util_script.c,v
retrieving revision 1.96
retrieving revision 1.97
diff -u -r1.96 -r1.97
--- util_script.c 1998/02/21 11:05:17 1.96
+++ util_script.c 1998/02/23 07:58:45 1.97
@@ -214,7 +214,8 @@
* in the environment with "ps -e". But, if you must...
*/
#ifndef SECURITY_HOLE_PASS_AUTHORIZATION
- else if (!strcasecmp(hdrs[i].key, "Authorization"))
+ else if (!strcasecmp(hdrs[i].key, "Authorization") ||
+ !strcasecmp(hdrs[i].key, "Proxy-Authorization"))
continue;
#endif
else
