Download
Browse source Changelog
Documentation
Project   Known bugs   TODO Protocols   CA bundle   HTTP Cookies   HTTP/2   SSL Certs Releases   Version numbers curl tool   man page   Tutorial   HTTP scripting Who and Why
libcurl
ABI API Competitors Examples Features Mailing list Related libs Using libcurl Tutorial Testimonials
Get Help
curl-library curl-users curl-announce curl-commits Etiquette
Development
Autobuilds Code Style Contribute Internals Release Notes Release Procedure Roadmap Run Tests Security Specifications Test curl
News
Changelog Release table
cURL / Mailing Lists / curl-library / Single Mail

curl-library

RE: [SECURITY ADVISORY] curl invalid URL parsing with '#'

From: Rod Widdowson <rdw_at_steadingsoftware.com>
Date: Sun, 6 Nov 2016 13:02:21 -0000

> First: I don't think it is clear in any spec that local file:// URLs actually
> work.

[Good stuff snipped]

> file:// didn't work very good for relaive file paths before this commit

[More Good stuff snipped]

A word from the peanut gallery: as soon as you think that you understand how this work, go try it on Windows where the "Dos Device Name" makes a mess with a lot of assumptions that all absolute paths start with a '/'. Also not every OS or runtime environment supports the assumption of "current working directory".

/Rod

-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2016-11-06