Prevent CONNECT request relaying to origin servers

CONNECT requests are proxy requests not to be forwarded to origins

diff --git a/src/neighbors.cc b/src/neighbors.cc
index c9a8e012843e507f135ec46ca2e852460f800cfe..caacb55d127c62ebdf7c45084f39c4dc8845d7c5 100644 (file)
--- a/src/neighbors.cc
+++ b/src/neighbors.cc
@@ -168,6 +168,10 @@ peerAllowedToUse(const peer * p, HttpRequest * request)
             return 0;
     }
 
+    // CONNECT requests are proxy requests. Not to be forwarded to origin servers.
+    if (p->options.originserver && request->method == METHOD_CONNECT)
+        return 0;
+
     if (p->peer_domain == NULL && p->access == NULL)
         return do_ping;