ref: 2443d46a9ead610cdeebdc389f7b05356216d93e
parent: 8ef66ca21218af00181bf78f37a5ede0238a7fa1
author: cinap_lenrek <cinap_lenrek@felloff.net>
date: Fri Mar 13 21:09:37 EDT 2015
webfs: do not send credentials in automatic referer url
--- a/sys/src/cmd/webfs/fs.c
+++ b/sys/src/cmd/webfs/fs.c
@@ -421,6 +421,11 @@
u->host = smprint("%H", r);
free(r);
}
+
+ /* do not send credentials */
+ free(u->user); u->user = nil;
+ free(u->pass); u->pass = nil;
+
if(r = smprint("%U", u)){
cl->hdr = addkey(cl->hdr, "Referer", r);
free(r);