Prevent CONNECT request relaying to origin servers

CONNECT requests are proxy requests not to be forwarded to origins

diff --git a/src/neighbors.cc b/src/neighbors.cc
index e5ea243f6c7c926c572c3bde84834d22ff2a7efd..ad9ec5bbda536c5c779a8872dcf72290617ded37 100644 (file)
--- a/src/neighbors.cc
+++ b/src/neighbors.cc
@@ -167,6 +167,10 @@ peerAllowedToUse(const peer * p, HttpRequest * request)
             return 0;
     }
 
+    // CONNECT requests are proxy requests. Not to be forwarded to origin servers.
+    if (p->options.originserver && request->method == METHOD_CONNECT)
+        return 0;
+
     if (p->peer_domain == NULL && p->access == NULL)
         return do_ping;