Change #282083
| Category | None |
| Changed by | Joshua Rogers <MegaManSec@users.noreply.github.com> |
| Changed at | Thu 17 Sep 2026 22:32:57 |
| Repository | https://api.github.com/repos/curl/curl |
| Project | curl/curl |
| Branch | master |
| Revision | b5c334937127a2743889519ceeb558f9e214b600 |
Comments
rtsp: do not send a learned session id to another origin A Session: id issued by one server was forwarded across a redirect to the next origin. Remember the origin that issued it and suppress the header elsewhere, unless CURLOPT_UNRESTRICTED_AUTH is set. An id set with CURLOPT_RTSP_SESSION_ID is unaffected. Closes #22920
Changed files
- docs/libcurl/opts/CURLOPT_RTSP_SESSION_ID.md
- lib/rtsp.c
- lib/setopt.c
- lib/url.c
- lib/urldata.h
- tests/data/Makefile.am
- tests/data/test3233
- tests/libtest/Makefile.inc
- tests/libtest/lib3233.c