From f120bba62acfcaf22070b878aa44baf0c3ad8ab3 Mon Sep 17 00:00:00 2001
From: MichaelDaum <daum@michaeldaumconsulting.com>
Date: Mon, 6 Feb 2023 12:49:29 +0100
Subject: [PATCH] Item15182: restricted allowed protocols

---
 core/lib/Foswiki/Net/UserCredAgent.pm | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/core/lib/Foswiki/Net/UserCredAgent.pm b/core/lib/Foswiki/Net/UserCredAgent.pm
index 38d8cca21f..c741f427b4 100644
--- a/core/lib/Foswiki/Net/UserCredAgent.pm
+++ b/core/lib/Foswiki/Net/UserCredAgent.pm
@@ -14,6 +14,9 @@ our @ISA = ('LWP::UserAgent');
 sub new {
     my ( $class, $user, $pass ) = @_;
     my $this = $class->SUPER::new();
+
+    $this->protocols_allowed( [ 'http', 'https' ] );
+
     $this->{user} = $user;
     $this->{pass} = $pass;
     return $this;