On Thu, 15 May 2014, Jonathan C. wrote:

> Well, I was trying to limit the protocols, and used the following to accept
> only HTTP: curl_easy_setopt( curl, CURLOPT_PROTOCOLS, CURLPROTO_HTTP );
> curl_easy_setopt( curl, CURLOPT_REDIR_PROTOCOLS, CURLPROTO_HTTP );
>
> And made a call to an url that does a redirect to https, and it worked, is
> that expected behavior? Should it not block the redirect (because it's going
> to a not authorized protocol)?

That's a bug we fixed recently in this commit: 710f14edba4491a4a

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html