romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-24 22:43:38 +03:00
Code Issues Projects Releases Packages Wiki Activity

http: fix the check for 'Authorization' with Bearer

Browse source 
The code would wrongly check for it using an additional colon.

Reported-by: Blake Burkhart
Closes #6988
This commit is contained in:
Daniel Stenberg 2021-05-01 23:38:15 +02:00
parent 3a6058cb97
commit 8b9de77cd2
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
2 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/transfer.c
View file

@ -99,6 +99,8 @@ char *Curl_checkheaders(const struct Curl_easy *data,
{
struct curl_slist *head;
size_t thislen = strlen(thisheader);
DEBUGASSERT(thislen);
DEBUGASSERT(thisheader[thislen-1] != ':');
for(head = data->set.headers; head; head = head->next) {
if(strncasecompare(head->data, thisheader, thislen) &&