HTTPd: do not reveal the username through as the realm (fixes: #2993)
authorRémi Denis-Courmont <remi@remlab.net>
Tue, 4 Aug 2009 18:05:32 +0000 (21:05 +0300)
committerRémi Denis-Courmont <remi@remlab.net>
Tue, 4 Aug 2009 18:05:32 +0000 (21:05 +0300)
src/network/httpd.c

index 8f4b0f8..c016661 100644 (file)
@@ -2265,8 +2265,7 @@ static void* httpd_HostThread( void *data )
                                     {
                                         httpd_MsgAdd( answer,
                                                       "WWW-Authenticate",
-                                                      "Basic realm=\"%s\"",
-                                                      url->psz_user );
+                                                      "Basic realm=\"VLC stream\"" );
                                         /* We fail for all url */
                                         b_auth_failed = true;
                                         free( user );