]>
git.ipfire.org Git - thirdparty/squid.git/commit
Do not forward HTCP CLR requests denied by htcp_clr_access (#2246)
Before this change:
* htcp_access controls TST access
* htcp_clr_access controls CLR access to local cache purging
* nothing controls CLR forwarding -- it is always allowed
After this change:
* htcp_access controls TST access
* htcp_clr_access controls CLR access to local cache purging
* htcp_clr_access controls CLR forwarding
This bug was discovered and detailed by Joshua Rogers
https://joshua.hu/