curl / Mailing Lists / curl-library / Single Mail

curl-library

Re: stricter host name requirements for file:// URLs (was Re: [SECURITY ADVISORY] curl invalid URL parsing with '#')

From: Alex Bligh <alex_at_alex.org.uk>
Date: Fri, 11 Nov 2016 10:54:20 +0000

> On 11 Nov 2016, at 10:42, Daniel Stenberg <daniel_at_haxx.se> wrote:
>
> My point is just that in a file:// URL, the given name is not used for any networking. "localhost" will not be translated into an IP address and 127.0.0.1 will be treated just as "localhost".
>
> I don't think anyone ever started the (bad) habit of using ::1 in file:// URLs so adding that as another alias seems unnecessary to me.
>
> file://localhost/ and file://127.0.0.1/ will both work equally fine - even on IPv6-only hosts!

I realised no transfer is actually traversing the network (because it's the file protocol!), but was under the stupid misapprehension you were doing a DNS lookup on the name part first, which you aren't. So ignore me!

-- 
Alex Bligh
-------------------------------------------------------------------
List admin: https://cool.haxx.se/list/listinfo/curl-library
Etiquette:  https://curl.haxx.se/mail/etiquette.html
Received on 2016-11-11