romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-24 02:37:18 +03:00
Code Issues Projects Releases Packages Wiki Activity

CURLOPT_UNRESTRICTED_AUTH.md: 'Authorization' instead of 'Authentication'

Browse source 
Closes #22256
This commit is contained in:
Joel Depooter 2026-07-03 12:39:13 -07:00 • committed by Daniel Stenberg
parent 09bfd2c645
commit d23fa6e4b6
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/libcurl/opts/CURLOPT_UNRESTRICTED_AUTH.md
View file

@ -36,12 +36,12 @@ when following locations, even when the host changes. This option is
meaningful only when setting CURLOPT_FOLLOWLOCATION(3).
Further, when this option is not used or set to **0L**, libcurl does not send
custom nor internally generated `Authentication:` or `Cookie:` headers on
custom nor internally generated `Authorization:` or `Cookie:` headers on
requests done to other hosts than the one used for the initial URL. Another
host means that one or more of hostname, protocol scheme or port number
changed.
By default, libcurl only sends `Authentication:` or explicitly set `Cookie:`
By default, libcurl only sends `Authorization:` or explicitly set `Cookie:`
headers to the initial host as given in the original URL, to avoid leaking
username + password to other sites.