shithub: riscv

Info  •  Files  •  Log  •  Branches

webfs: do not send credentials in automatic referer url

--- a/sys/src/cmd/webfs/fs.c

+++ b/sys/src/cmd/webfs/fs.c

@@ -421,6 +421,11 @@

 						u->host = smprint("%H", r);

 						free(r);

 					}

+

+					/* do not send credentials */

+					free(u->user); u->user = nil;

+					free(u->pass); u->pass = nil;

+

 					if(r = smprint("%U", u)){

 						cl->hdr = addkey(cl->hdr, "Referer", r);

 						free(r);