Remove false cookies from the browser to avoid endless loops

diff --git a/webcit/webcit.c b/webcit/webcit.c
index 5b9078bbe26897c5b1b40e0266cb9e08da580edb..851829af909102188879f11abb7e23bd2a602478 100644 (file)
--- a/webcit/webcit.c
+++ b/webcit/webcit.c
@@ -314,6 +314,11 @@ void authorization_required(void)
                PACKAGE_STRING, ChrPtr(WC->serv_info->serv_software)
        );
        hprintf("WWW-Authenticate: Basic realm=\"%s\"\r\n", ChrPtr(WC->serv_info->serv_humannode));
+
+       /* if this is a false cookie authentication, remove it to avoid endless loops. */
+       if (StrLength(WCC->Hdr->HR.RawCookie) > 0)
+               stuff_to_cookie(1);
+
        hprintf("Content-Type: text/html\r\n");
        begin_burst();
        wc_printf("<h1>");