Firefox · Networking
CVE-2026-92044
Logic Error in Networking
Overview
Moderate
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
ifnetwerk/protocol/http/nsHttpChannelAuthProvider.cpp |
modified |
Files Changed
netwerk/protocol/http/nsHttpChannelAuthProvider.cpp
Patch
diff --git a/netwerk/protocol/http/nsHttpChannelAuthProvider.cpp b/netwerk/protocol/http/nsHttpChannelAuthProvider.cpp
index aa6e9402bb4..cacd523a510 100644
--- a/netwerk/protocol/http/nsHttpChannelAuthProvider.cpp
+++ b/netwerk/protocol/http/nsHttpChannelAuthProvider.cpp
@@ -879,6 +879,13 @@ nsresult nsHttpChannelAuthProvider::GetCredentialsForChallenge(
// as restartable.
mAuthChannel->ConnectionRestartable(!authAtProgress);
+ if (identFromURI &&
+ (authFlags & nsIHttpAuthenticator::IDENTITY_INCLUDES_DOMAIN)) {
+ LOG((" ignoring URL identity for a domain-identity scheme\n"));
+ ident->Clear();
+ identFromURI = false;
+ }
+
if (identityInvalid) {
if (entry) {
if (ident->Equals(entry->Identity())) {
Loading diff…
References
On This Page