Default to CURLOPT_UNRESTRICTED_AUTH = 0, resolves #260 (#328)

jeroen · Jan 28, 2024 · edf52b9 · edf52b9
1 parent e65f0f5
commit edf52b9
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 1 deletion.
diff --git a/NEWS b/NEWS
@@ -1,6 +1,7 @@
 5.2.1
  - Fix an issue where curl_fetch_stream() might not return all bytes received
    by the C layer if the server closed the connection mid-response.
+ - No longer enable CURLOPT_UNRESTRICTED_AUTH by default
 
 5.2.0
  - The CURL_CA_BUNDLE envvar is now also used on non-Windows.

diff --git a/src/handle.c b/src/handle.c
@@ -172,7 +172,6 @@ static void set_handle_defaults(reference *ref){
 
   /* allow all authentication methods */
   assert(curl_easy_setopt(handle, CURLOPT_HTTPAUTH, CURLAUTH_ANY));
-  assert(curl_easy_setopt(handle, CURLOPT_UNRESTRICTED_AUTH, 1L));
   assert(curl_easy_setopt(handle, CURLOPT_PROXYAUTH, CURLAUTH_ANY));
 
   /* enables HTTP2 on HTTPS (match behavior of curl cmd util) */