From: Amos Jeffries <squid3@treenet.co.nz>
Date: Fri, 11 Feb 2011 11:48:28 +0000 (-0700)
Subject: Prevent CONNECT request relaying to origin servers
X-Git-Tag: take03^2~18
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ad46590bd649b938e43304bebbd5918c5521fe14;p=thirdparty%2Fsquid.git

Prevent CONNECT request relaying to origin servers

CONNECT requests are proxy requests not to be forwarded to origins
---

diff --git a/src/neighbors.cc b/src/neighbors.cc
index c9a8e01284..caacb55d12 100644
--- a/src/neighbors.cc
+++ b/src/neighbors.cc
@@ -168,6 +168,10 @@ peerAllowedToUse(const peer * p, HttpRequest * request)
             return 0;
     }
 
+    // CONNECT requests are proxy requests. Not to be forwarded to origin servers.
+    if (p->options.originserver && request->method == METHOD_CONNECT)
+        return 0;
+
     if (p->peer_domain == NULL && p->access == NULL)
         return do_ping;