[svn] Fix for bug #20296: User:pass@ given in Referer header.

[wget] / NEWS

diff --git a/NEWS b/NEWS
index e5f6878d563b90cee01c2ea7a1db02d21c082459..fe0968385d6e798d1e2b03863b4c853fb2c6db82 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,9 @@ Please send GNU Wget bug reports to <bug-wget@gnu.org>.
 \f
 * Changes in Wget 1.11.
 
+** Authentication information is no longer sent as part of the Referer
+header in recursive fetches.
+
 ** No authentication credentials are sent until a challenge is issued,
 for improved security. Authentication handling is still not
 RFC-compliant, as once a Basic challenge has been received, it will