Don't reuse credentials if redirected to a different host.

Submitted by: Niels Heinen <[email protected]> MFC after: 3 weeks
AhmadTux · Apr 30, 2012 · 17b92ca · 17b92ca
1 parent f695f4d
commit 17b92ca
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/lib/libfetch/http.c b/lib/libfetch/http.c
@@ -1779,7 +1779,9 @@ http_request(struct url *URL, const char *op, struct url_stat *us,
 					DEBUG(fprintf(stderr, "failed to parse new URL\n"));
 					goto ouch;
 				}
-				if (!*new->user && !*new->pwd) {
+
+				/* Only copy credentials if the host matches */
+				if (!strcmp(new->host, url->host) && !*new->user && !*new->pwd) {
 					strcpy(new->user, url->user);
 					strcpy(new->pwd, url->pwd);
 				}