diff options
| author | Andreas Gohr <gohr@cosmocode.de> | 2014-10-06 14:59:03 +0200 |
|---|---|---|
| committer | Andreas Gohr <gohr@cosmocode.de> | 2014-10-06 14:59:03 +0200 |
| commit | 60aca4b904310fc764389d058c23e7b978b513a3 (patch) | |
| tree | 61208fac26b26567eaa718b15cf53031cbf1b88d | |
| parent | 8ab9b36bd82324905789495a863185b63b28e84b (diff) | |
| download | rpg-60aca4b904310fc764389d058c23e7b978b513a3.tar.gz rpg-60aca4b904310fc764389d058c23e7b978b513a3.tar.bz2 | |
do not use Accept-Encoding in browser UID
Since Chrome 37, they send differen accept encodings for POST and GET
requests which will break BrowserUID checks as reported in
cosmocode/dokuwiki-plugin-oauth/issues/3
See https://code.google.com/p/chromium/issues/detail?id=410559 for
official bug report at Google
| -rw-r--r-- | inc/auth.php | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/inc/auth.php b/inc/auth.php index e938830ef..4b1e6ce31 100644 --- a/inc/auth.php +++ b/inc/auth.php @@ -335,7 +335,6 @@ function auth_browseruid() { $ip = clientIP(true); $uid = ''; $uid .= $INPUT->server->str('HTTP_USER_AGENT'); - $uid .= $INPUT->server->str('HTTP_ACCEPT_ENCODING'); $uid .= $INPUT->server->str('HTTP_ACCEPT_CHARSET'); $uid .= substr($ip, 0, strpos($ip, '.')); $uid = strtolower($uid); |