Download
Browse source Changelog
Documentation
Project   Bug Bounty   Help us   Known bugs   TODO Protocols   CA bundle   HTTP Cookies   HTTP/2   SSL Certs Releases   Security   Version numbers   Vulnerabilities curl tool   man page   Tutorial   HTTP scripting Who and Why
libcurl
ABI API Competitors Examples Features Mailing list Related libs Using libcurl Tutorial Testimonials
Get Help
curl-library curl-users Mailing lists Book: Everything curl Video presentations Report a bug Paid support
Development
Autobuilds Code Style Contribute Deprecate Internals Release Notes Release Procedure Roadmap Run Tests Security Process Specifications Test curl
News
Changelog Release table
curl / Mailing Lists / curl-users / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Question Concerning cURL Commad

From: Ravanell Lang via curl-users <curl-users_at_cool.haxx.se>
Date: Sat, 2 Nov 2019 15:35:00 -0400

We have filtered out our web server information using three known
filter-out security tags in our web.config. And we have reverified that our
web server info is not being displayed using Web Browser Developer Tools
and iCurlHTTP app. However when we use < curl -I -s -H “Host: evil.com”
www.example.com>, it displays our web server info. Our team believe cURL is
pulling our server info from our load balancer/proxy server.

Our question is where is cURL pulling our server info from if we have it
filtered out on web server?

Thank you.

Very respectfully,

//iRav2.0//

-----------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2019-11-02