From: Amos Jeffries <squid3@treenet.co.nz>
Date: Fri, 11 Feb 2011 20:20:12 +0000 (-0700)
Subject: Prevent CONNECT request relaying to origin servers
X-Git-Tag: SQUID_3_1_12~30
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6fff352a49eeac647c7994e877f7baf63e93e89e;p=thirdparty%2Fsquid.git

Prevent CONNECT request relaying to origin servers

CONNECT requests are proxy requests not to be forwarded to origins
---

diff --git a/src/neighbors.cc b/src/neighbors.cc
index e5ea243f6c..ad9ec5bbda 100644
--- a/src/neighbors.cc
+++ b/src/neighbors.cc
@@ -167,6 +167,10 @@ peerAllowedToUse(const peer * p, HttpRequest * request)
             return 0;
     }
 
+    // CONNECT requests are proxy requests. Not to be forwarded to origin servers.
+    if (p->options.originserver && request->method == METHOD_CONNECT)
+        return 0;
+
     if (p->peer_domain == NULL && p->access == NULL)
         return do_ping;