Disable HTTP art handler by default, due to security problems - fixes #1308

diff --git a/modules/control/http/http.c b/modules/control/http/http.c
index bebc4762842663089ba052174d91cf8c7b29052c..ae6c94e85f04ae711668edb3b2a7d6ce67334a3a 100644 (file)
--- a/modules/control/http/http.c
+++ b/modules/control/http/http.c
@@ -72,7 +72,7 @@ vlc_module_begin();
 #if defined( HAVE_FORK ) || defined( WIN32 )
         add_string ( "http-handlers", NULL, NULL, HANDLERS_TEXT, HANDLERS_LONGTEXT, VLC_TRUE );
 #endif
-        add_bool   ( "http-album-art", 1, NULL, ART_TEXT, ART_LONGTEXT, VLC_TRUE );
+        add_bool   ( "http-album-art", VLC_FALSE, NULL, ART_TEXT, ART_LONGTEXT, VLC_TRUE );
         set_section( N_("HTTP SSL" ), 0 );
         add_string ( "http-intf-cert", NULL, NULL, CERT_TEXT, CERT_LONGTEXT, VLC_TRUE );
         add_string ( "http-intf-key",  NULL, NULL, KEY_TEXT,  KEY_LONGTEXT,  VLC_TRUE );