curl-library
Re: stricter host name requirements for file:// URLs (was Re: [SECURITY ADVISORY] curl invalid URL parsing with '#')
From: Alex Bligh <alex_at_alex.org.uk>
Date: Fri, 11 Nov 2016 10:54:20 +0000
Date: Fri, 11 Nov 2016 10:54:20 +0000
> On 11 Nov 2016, at 10:42, Daniel Stenberg <daniel_at_haxx.se> wrote:
>
> My point is just that in a file:// URL, the given name is not used for any networking. "localhost" will not be translated into an IP address and 127.0.0.1 will be treated just as "localhost".
>
> I don't think anyone ever started the (bad) habit of using ::1 in file:// URLs so adding that as another alias seems unnecessary to me.
>
> file://localhost/ and file://127.0.0.1/ will both work equally fine - even on IPv6-only hosts!
I realised no transfer is actually traversing the network (because it's the file protocol!), but was under the stupid misapprehension you were doing a DNS lookup on the name part first, which you aren't. So ignore me!
-- Alex Bligh ------------------------------------------------------------------- List admin: https://cool.haxx.se/list/listinfo/curl-library Etiquette: https://curl.haxx.se/mail/etiquette.htmlReceived on 2016-11-11