]> git.ipfire.org Git - thirdparty/squid.git/commit
Do not forward HTCP CLR requests denied by htcp_clr_access (#2246)
authorAlex Rousskov <rousskov@measurement-factory.com>
Sun, 5 Oct 2025 18:44:01 +0000 (18:44 +0000)
committerSquid Anubis <squid-anubis@squid-cache.org>
Sun, 5 Oct 2025 18:46:16 +0000 (18:46 +0000)
commit0cd14eafa5b05f0cefb00152f48d33946e7681fb
tree48ffe3bd9e42c04b6ce9ae98caa83cde340a8171
parentd732d6f240624b0001b182b8f7514f649e27a09c
Do not forward HTCP CLR requests denied by htcp_clr_access (#2246)

Before this change:

* htcp_access controls TST access
* htcp_clr_access controls CLR access to local cache purging
* nothing controls CLR forwarding -- it is always allowed

After this change:

* htcp_access controls TST access
* htcp_clr_access controls CLR access to local cache purging
* htcp_clr_access controls CLR forwarding

This bug was discovered and detailed by Joshua Rogers
https://joshua.hu/
doc/release-notes/release-8.sgml.in
src/cf.data.pre
src/htcp.cc