]> git.ipfire.org Git - thirdparty/curl.git/commit
projects / thirdparty / curl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8c15e0d) | patch
URL-parser: for file://[host]/ URLs, the [host] must be localhost
authorDaniel Stenberg <daniel@haxx.se>
Fri, 11 Nov 2016 07:09:04 +0000 (08:09 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Fri, 11 Nov 2016 16:14:45 +0000 (17:14 +0100)
commit346340808c89db33803ef7461dee191ff7c3d07f
tree569e90dc90b26115967ba813a75fefaf86df5583tree | snapshot
parent8c15e0de6f70e48eafe9e5b986f032c17dd88e07commit | diff
URL-parser: for file://[host]/ URLs, the [host] must be localhost

Previously, the [host] part was just ignored which made libcurl accept
strange URLs misleading users. like "file://etc/passwd" which might've
looked like it refers to "/etc/passwd" but is just "/passwd" since the
"etc" is an ignored host name.

Reported-by: Mike Crowe
Assisted-by: Kamil Dudka
lib/url.c diff | blob | blame | history
Mirror of https://github.com/curl/curl.git