Verified Commit cb7c318d authored by Mike Perry's avatar Mike Perry Committed by ma1
Browse files

Bug 12974: Disable NTLM and Negotiate HTTP Auth 

The Mozilla bugs: https://bugzilla.mozilla.org/show_bug.cgi?id=1046421,
https://bugzilla.mozilla.org/show_bug.cgi?id=1261591, #27602
parent 301dd582

extensions/auth/nsHttpNegotiateAuth.cpp

+4 −0
Original line number Diff line number Diff line
@@ -154,6 +154,10 @@ nsHttpNegotiateAuth::ChallengeReceived(nsIHttpAuthenticableChannel* authChannel, 
  nsIAuthModule* rawModule = (nsIAuthModule*)*continuationState;



  *identityInvalid = false;



  /* Always fail Negotiate auth for Tor Browser. We don't need it. */

  return NS_ERROR_ABORT;



  if (rawModule) {

    return NS_OK;

  }

netwerk/protocol/http/nsHttpNTLMAuth.cpp

+3 −0
Original line number Diff line number Diff line
@@ -168,6 +168,9 @@ nsHttpNTLMAuth::ChallengeReceived(nsIHttpAuthenticableChannel* channel, 


  *identityInvalid = false;



  /* Always fail Negotiate auth for Tor Browser. We don't need it. */

  return NS_ERROR_ABORT;



  // Start a new auth sequence if the challenge is exactly "NTLM".

  // If native NTLM auth apis are available and enabled through prefs,

  // try to use them.