mirror of
https://github.com/nmap/nmap.git
synced 2025-12-06 04:31:29 +00:00
Reject supported hash in Proxy-Authorization header
This should not normally happen, as the hash is expected to match what Ncat offered in prior Proxy-Authenticate. Closes #2440
This commit is contained in:
@@ -1456,7 +1456,7 @@ static const char *http_read_credentials(const char *s,
|
||||
if (str_equal_i(value, "MD5"))
|
||||
credentials->u.digest.algorithm = ALGORITHM_MD5;
|
||||
else
|
||||
credentials->u.digest.algorithm = ALGORITHM_MD5;
|
||||
credentials->u.digest.algorithm = ALGORITHM_UNKNOWN;
|
||||
} else if (str_equal_i(name, "qop")) {
|
||||
if (str_equal_i(value, "auth"))
|
||||
credentials->u.digest.qop = QOP_AUTH;
|
||||
|
||||
Reference in New Issue
Block a user