Artifact 4d7735aa872895764090221a95d862cd060669c6b6f4bb45f304436ad9fed93d:
- File
build.zig.zon
— part of check-in
[b637cbd37c]
at
2026-09-24 16:44:56
on branch trunk
— transport: refuse Basic over plain http to another host; drop it on a cross-host redirect
A Basic challenge was answered whatever the scheme, so over http the password crossed readable and the saved remote repeated it. It is now refused to non-loopback hosts, naming the https URL; a redirect to another host drops the credential; plain http to another host notes it on stderr. Release 0.3.30. (user: dmestas, size: 348) [annotate] [blame] [check-ins using]
.{ .name = .zit, .version = "0.3.30", .fingerprint = 0x4570515ffc0991f4, // Changing this has security and trust implications. .minimum_zig_version = "0.16.0", .dependencies = .{}, .paths = .{ "build.zig", "build.zig.zon", "src", "docs/rfcs", "README.md", "LICENSE", }, }