[vlc-devel] commit: HTTPd: do not reveal the username through as the realm (fixes: #2993) ( Rémi Denis-Courmont )

[git version control]

vlc | branch: 1.0-bugfix | Rémi Denis-Courmont <remi at remlab.net> | Tue Aug  4 21:05:32 2009 +0300| [9a550597854fb2ccce6d6cd005074793f2ec105f] | committer: Rémi Denis-Courmont 

HTTPd: do not reveal the username through as the realm (fixes: #2993)

(cherry picked from commit cd5c7acea580f960e1ff17a1d88d39c6734777ea)

> http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit;h=9a550597854fb2ccce6d6cd005074793f2ec105f
---

 src/network/httpd.c |    3 +--
 1 files changed, 1 insertions(+), 2 deletions(-)

diff --git a/src/network/httpd.c b/src/network/httpd.c
index 8f4b0f8..c016661 100644
--- a/src/network/httpd.c
+++ b/src/network/httpd.c
@@ -2265,8 +2265,7 @@ static void* httpd_HostThread( void *data )
                                     {
                                         httpd_MsgAdd( answer,
                                                       "WWW-Authenticate",
-                                                      "Basic realm=\"%s\"",
-                                                      url->psz_user );
+                                                      "Basic realm=\"VLC stream\"" );
                                         /* We fail for all url */
                                         b_auth_failed = true;
                                         free( user );