| commit | 7b08ba6f8a304633e96cd122982c483ffd1bcafe | [log] [tgz] |
|---|---|---|
| author | tsepez@chromium.org <tsepez@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | Fri Feb 10 20:19:41 2012 |
| committer | tsepez@chromium.org <tsepez@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | Fri Feb 10 20:19:41 2012 |
| tree | 36cf877fd56845de88adf84b6393e6fb79ea8ca0 | |
| parent | c0714dfcceb93df1dda0af23d72fc29a5399556c [diff] |
Don't use IDENT_SRC_URL for HttpAuth challenges. IE hasn't supported it for years, and at worst it represents a session fixation attack. BUG=94578 Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=120836 Review URL: http://codereview.chromium.org/9307093 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@121506 0039d316-1c4b-4281-b951-d872f2087c98