-
-
Notifications
You must be signed in to change notification settings - Fork 2.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove curl auth on cross-domain redirects #2845
Conversation
abe294e
to
c78f124
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
As a non-maintainer that eyeballed the diff this LGTM.
Do we actually want to support someone circumventing Guzzle's abstraction, and setting auth headers directly through curl options? |
@GrahamCampbell My understanding is that this is related to this: Lines 405 to 413 in 3a0543e
|
Ah, I see that "todo" is what needs resolving. |
I looked at the todo item before submitting this PR and resolved to submitting PR anyway. I have 2 reasons for that:
tl;dr: a fix is better than no fix for issue being open for so long with low chances of proper fix. |
Is there anything else I could do for this PR? |
This issue has been automatically marked as stale because it has not had recent activity. It will be closed after 2 weeks if no further activity occurs. Thank you for your contributions. |
ping? Somebody wants to re-run all checks and merge it in? |
This issue has been automatically marked as stale because it has not had recent activity. It will be closed after 2 weeks if no further activity occurs. Thank you for your contributions. |
Rebased on latest master. Please take a look. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you
Fixes #1477