On Tue, Nov 25, 2008 at 01:36:49PM -0800, Dan Fandrich wrote:
> On Tue, Nov 25, 2008 at 10:12:39PM +0100, Menner May wrote:
> > There's still a problem: curl sends the basic authentication header
> > again and again
> > on all subsequent redirected GETs. Firefox doesn't do that.
>
> I don't think it should be doing that unless you are using the
> --location-trusted option. Sounds like a bug.

Test case 233 in the test suite checks this and curl doesn't send the
authorization header on the redirect. I also tried it manually with
--anyauth and it still doesn't. Under exactly what conditions are you
finding this happens?

>>> Dan

-- 
http://www.MoveAnnouncer.com              The web change of address service
          Let webmasters know that your web site has moved
-------------------------------------------------------------------
List admin: http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-users
FAQ:        http://curl.haxx.se/docs/faq.html
Etiquette:  http://curl.haxx.se/mail/etiquette.html