From 60aca4b904310fc764389d058c23e7b978b513a3 Mon Sep 17 00:00:00 2001
From: Andreas Gohr <gohr@cosmocode.de>
Date: Mon, 6 Oct 2014 14:59:03 +0200
Subject: [PATCH] do not use Accept-Encoding in browser UID
Since Chrome 37, they send differen accept encodings for POST and GET
requests which will break BrowserUID checks as reported in
cosmocode/dokuwiki-plugin-oauth/issues/3
See https://code.google.com/p/chromium/issues/detail?id=410559 for
official bug report at Google
---
inc/auth.php | 1 -
1 file changed, 1 deletion(-)
diff --git a/inc/auth.php b/inc/auth.php
index e938830ef..4b1e6ce31 100644
--- a/inc/auth.php
+++ b/inc/auth.php
@@ -335,7 +335,6 @@ function auth_browseruid() {
$ip = clientIP(true);
$uid = '';
$uid .= $INPUT->server->str('HTTP_USER_AGENT');
- $uid .= $INPUT->server->str('HTTP_ACCEPT_ENCODING');
$uid .= $INPUT->server->str('HTTP_ACCEPT_CHARSET');
$uid .= substr($ip, 0, strpos($ip, '.'));
$uid = strtolower($uid);
--
GitLab