VladPolskiy/apache-http-server
1
0
Fork 0
mirror of https://github.com/apache/httpd.git synced 2025-08-13 14:40:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remember an authenticated user during internal redirects if the

Browse Source 
redirection target is not access protected and pass it
to scripts using the REDIRECT_REMOTE_USER environment variable.

PR: 10678, 11602.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100604 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
André Malo
2003-07-14 17:24:38 +00:00
parent 78fc3f4c59
commit cf9772a8fc
3 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGES
View File

@ -2,6 +2,11 @@ Changes with Apache 2.1.0-dev
[Remove entries to the current 2.0 section below, when backported]
*) Remember an authenticated user during internal redirects if the
redirection target is not access protected and pass it
to scripts using the REDIRECT_REMOTE_USER environment variable.
PR 10678, 11602. [Andr<64> Malo]
*) mod_rewrite: fix a problem in the proxy support of mod_rewrite.
The broken code was inserting multiple "proxy:" fields in the
rewritten URIs. [PR: 13946]

11
server/util_script.c
View File

@ -286,6 +286,17 @@ AP_DECLARE(void) ap_add_common_vars(request_rec *r)
if (r->user) {
apr_table_addn(e, "REMOTE_USER", r->user);
}
else if (r->prev) {
request_rec *back = r->prev;
while (back) {
if (back->user) {
apr_table_addn(e, "REDIRECT_REMOTE_USER", back->user);
break;
}
back = back->prev;
}
}
if (r->ap_auth_type) {
apr_table_addn(e, "AUTH_TYPE", r->ap_auth_type);
}

1
support/suexec.c
View File

@ -160,6 +160,7 @@ char *safe_env_lst[] =
"REMOTE_USER=",
"REDIRECT_HANDLER=",
"REDIRECT_QUERY_STRING=",
"REDIRECT_REMOTE_USER=",
"REDIRECT_STATUS=",
"REDIRECT_URL=",
"REQUEST_METHOD=",