HTTPd: do not reveal the username through as the realm (fixes: #2993)

diff --git a/src/network/httpd.c b/src/network/httpd.c
index 8f4b0f83e3df6422ffa04704cdde32665a0d2482..c01666155ebfa2d1759a0a7d9fec88f10ca66786 100644 (file)
--- a/src/network/httpd.c
+++ b/src/network/httpd.c
@@ -2265,8 +2265,7 @@ static void* httpd_HostThread( void *data )
                                     {
                                         httpd_MsgAdd( answer,
                                                       "WWW-Authenticate",
-                                                      "Basic realm=\"%s\"",
-                                                      url->psz_user );
+                                                      "Basic realm=\"VLC stream\"" );
                                         /* We fail for all url */
                                         b_auth_failed = true;
                                         free( user );