comparison .hgtags @ 8038:711737177b77

Multiple WWW-Authenticate headers with "satisfy any;". If a module adds multiple WWW-Authenticate headers (ticket #485) to the response, linked in r->headers_out.www_authenticate, all headers are now cleared if another module later allows access. This change is a nop for standard modules, since the only access module which can add multiple WWW-Authenticate headers is the auth request module, and it is checked after other standard access modules. Though this might affect some third party access modules. Note that if a 3rd party module adds a single WWW-Authenticate header and not yet modified to set the header's next pointer to NULL, attempt to clear such a header with this change will result in a segmentation fault.
author Maxim Dounin <mdounin@mdounin.ru>
date Mon, 30 May 2022 21:25:56 +0300
parents 56ead48cfe88
children 2d3ed138ce65 fecd73db563f
comparison
equal deleted inserted replaced
8037:8272c823a7d0 8038:711737177b77