digestauth: explicitly reject unsupported algorithm requested by application

This commit is contained in:
Evgeny Grin (Karlson2k) committed 2024-08-02 16:00:55 +02:00
1 parent ee3cf9cf31
commit e1248def30
1 file changed
+2 -1
+2 -1
View File
@@ -3537,7 +3537,8 @@ queue_auth_required_response3_inner (struct MHD_Connection *connection,
size_t p; /* The position in the buffer */
char *hdr_name;
if (0 == (((unsigned int) malgo3) & MHD_DIGEST_AUTH_ALGO3_NON_SESSION))
if ((0 == (((unsigned int) malgo3) & MHD_DIGEST_AUTH_ALGO3_NON_SESSION)) ||
(0 != (((unsigned int) malgo3) & MHD_DIGEST_AUTH_ALGO3_SESSION)))
{
#ifdef HAVE_MESSAGES
MHD_DLOG (connection->daemon,