--On 17 April 2010 23:13:49 +0200 Daniel Stenberg <daniel_at_haxx.se> wrote:

>> I would have thought that redirection to file: URLs should be prohibited
>> anyway.
>
> They are prohibited by default since 7.19.4. See
> http://curl.haxx.se/docs/adv_20090303.html

Perfect, thanks. Reading the patch I see telnet urls (interalia) are not
disabled. Given these can in theory specify a port address (per RFC1738)
  telnet://<user>:<password>@<host>:<port>/
is there some environment variable or similar I can set to restrict
curl protocols (or redirect protocols) with the curl binary (this appears
to be CURLOPT_PROTOCOLS and CURLOPT_REDIR_PROTOCOLS in libcurl)

-- 
Alex Bligh
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ:        http://curl.haxx.se/docs/faq.html
Etiquette:  http://curl.haxx.se/mail/etiquette.html