]> git.ipfire.org Git - thirdparty/curl.git/commit
projects / thirdparty / curl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 184ffc0) | patch
transfer: strip credentials from the auto-referer header field
authorViktor Szakats <commit@vsz.me>
Tue, 23 Feb 2021 13:54:46 +0000 (14:54 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Sun, 28 Mar 2021 21:19:55 +0000 (23:19 +0200)
commit7214288898f5625a6cc196e22a74232eada7861c
tree3db8599cd34164f6005cb8aa423cb7cd9ddc853dtree | snapshot
parent184ffc0bdfcab17eb96d1dd64f9c0cecc139e3e9commit | diff
transfer: strip credentials from the auto-referer header field

Added test 2081 to verify.

CVE-2021-22876

Bug: https://curl.se/docs/CVE-2021-22876.html
lib/transfer.c diff | blob | blame | history
tests/data/Makefile.inc diff | blob | blame | history
tests/data/test2081 [new file with mode: 0644] blob
Mirror of https://github.com/curl/curl.git