HTTPd: do not reveal the username through as the realm (fixes: #2993)

cd5c7ace · Rémi Denis-Courmont · 2037bb71 · cd5c7ace
Commit cd5c7ace authored Aug 04, 2009 by Rémi Denis-Courmont
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 2 deletions

src/network/httpd.c src/network/httpd.c +1 -2

No files found.
--- a/src/network/httpd.c
+++ b/src/network/httpd.c
@@ -2265,8 +2265,7 @@ static void* httpd_HostThread( void *data )
                                    {
                                        httpd_MsgAdd( answer,
                                                      "WWW-Authenticate",
-                                                      "Basic realm=\"%s\"",
+                                                      "Basic realm=\"VLC stream\"" );
-                                                      url->psz_user );
                                        /* We fail for all url */
                                        b_auth_failed = true;
                                        free( user );