From fbff3a04eec3164d19f9587edb6928f25aaf9db7 Mon Sep 17 00:00:00 2001 From: jshlbrd Date: Wed, 25 Mar 2015 16:07:27 -0700 Subject: [PATCH] Add PROXY-AUTHORIZATION header Added the PROXY-AUTHORIZATION header so that proxy username and passwords can be decoded. It follows the same syntax as the AUTHORIZATION header. --- scripts/base/protocols/http/main.bro | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/base/protocols/http/main.bro b/scripts/base/protocols/http/main.bro index c8f06dff18..735455f70f 100644 --- a/scripts/base/protocols/http/main.bro +++ b/scripts/base/protocols/http/main.bro @@ -257,7 +257,7 @@ event http_header(c: connection, is_orig: bool, name: string, value: string) &pr add c$http$proxied[fmt("%s -> %s", name, value)]; } - else if ( name == "AUTHORIZATION" ) + else if ( name == "AUTHORIZATION" || name == "PROXY-AUTHORIZATION" ) { if ( /^[bB][aA][sS][iI][cC] / in value ) {