romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-06 01:56:14 +03:00
Code Issues Projects Releases Packages Wiki Activity

http: clear the proxy credentials as well on port or scheme change

Browse source 
Add tests 2009-2011 to verify switching between proxies with credentials
when the switch is driven by a redirect

Reported-by: Dwij Mehta

Closes #21304
This commit is contained in:
Daniel Stenberg 2026-04-13 17:17:23 +02:00
parent 9ceb3ff46a
commit 188c2f166a
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
7 changed files with 262 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

12
lib/http.c
View file

@ -1278,12 +1278,24 @@ CURLcode Curl_http_follow(struct Curl_easy *data, const char *newurl,
curlx_free(scheme);
}
if(clear) {
CURLcode result = Curl_reset_userpwd(data);
if(result) {
curlx_free(follow_url);
return result;
}
curlx_safefree(data->state.aptr.user);
curlx_safefree(data->state.aptr.passwd);
}
}
}
DEBUGASSERT(follow_url);
{
CURLcode result = Curl_reset_proxypwd(data);
if(result) {
curlx_free(follow_url);
return result;
}
}
if(type == FOLLOW_FAKE) {
/* we are only figuring out the new URL if we would have followed locations