Change #271326

Comments

url: connection credentials origin

When tying credentials to a connection (NTLM, Negotiate) also link the
origin the credentials are for. This prevents a connection reuse with
the same credentials, but intended for another origin.

The mis-reuse could happen for a forwarding proxy and NTLM (although, in
the mind of the person writing this, it is an insane setup).

Closes #22040

Changed files

• lib/http_negotiate.c
• lib/http_ntlm.c
• lib/url.c
• lib/urldata.h