diff options
author | Maxim Dounin <mdounin@mdounin.ru> | 2022-05-30 21:25:56 +0300 |
---|---|---|
committer | Maxim Dounin <mdounin@mdounin.ru> | 2022-05-30 21:25:56 +0300 |
commit | f74e1ea9959f714dd8c284a7811b97815171adc3 (patch) | |
tree | b0a01db06825a92bf1fee49495fce0c3ea48cc8c /src/http/modules/ngx_http_proxy_module.c | |
parent | 911c95bfd3a17632c6f3d8c2f261055520278cc7 (diff) | |
download | nginx-f74e1ea9959f714dd8c284a7811b97815171adc3.tar.gz nginx-f74e1ea9959f714dd8c284a7811b97815171adc3.zip |
Multiple WWW-Authenticate headers with "satisfy any;".
If a module adds multiple WWW-Authenticate headers (ticket #485) to the
response, linked in r->headers_out.www_authenticate, all headers are now
cleared if another module later allows access.
This change is a nop for standard modules, since the only access module which
can add multiple WWW-Authenticate headers is the auth request module, and
it is checked after other standard access modules. Though this might
affect some third party access modules.
Note that if a 3rd party module adds a single WWW-Authenticate header
and not yet modified to set the header's next pointer to NULL, attempt to
clear such a header with this change will result in a segmentation fault.
Diffstat (limited to 'src/http/modules/ngx_http_proxy_module.c')
0 files changed, 0 insertions, 0 deletions