The GitHub Actions job "Java CI with Maven" on 
stormcrawler.git/issue-2079-okhttp-trust-v2 has failed.
Run started by GitHub user rzo1 (triggered by dpol1).

Head commit for run:
18c696c6f5b75f060c9ee370e981c7cab11efa5e / Richard Zowalla <[email protected]>
Strip credentials before recording headers, withhold static Proxy-Authorization 
on hops

The credential interceptor now runs before HTTPHeadersInterceptor, so the
request headers stored for a hop (and written to WARC request records) are
the ones actually sent, not the ones stripped from a cleartext hop.

Proxy-Authorization is only kept on a hop when the proxy authenticator set
it and the hop is cleartext, i.e. when the proxy reads it. A static
Proxy-Authorization from http.custom.headers is treated like any other
credential on every hop, as the configuration documents.

Document that http.verify.hostnames: false withholds credentials too.

Report URL: https://github.com/apache/stormcrawler/actions/runs/34452489094

With regards,
GitHub Actions via GitBox

Reply via email to