Buy commercial curl support. We
help you work out your issues, debug your libcurl applications, use the API,
port to new platforms, add new features and more. With a team lead by the
curl founder Daniel himself.
Re: Limit the URL size more?
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Mon, 15 Dec 2025 07:46:34 +0100 (CET)
On Sun, 14 Dec 2025, Jeffrey Walton wrote:
> A url of http://www.example.com/image/../image.jpeg should result in an
> invalid path at the server and return an error to the client since there is
> no image/ subdirectory at document root.
Your opinion on this does not seem backed by the specifications.
curl has removed dotdot sequences by default for the last dozen years and
people are not having a problem with it.
curl also allows users to skip it.
Date: Mon, 15 Dec 2025 07:46:34 +0100 (CET)
On Sun, 14 Dec 2025, Jeffrey Walton wrote:
> A url of http://www.example.com/image/../image.jpeg should result in an
> invalid path at the server and return an error to the client since there is
> no image/ subdirectory at document root.
Your opinion on this does not seem backed by the specifications.
curl has removed dotdot sequences by default for the last dozen years and
people are not having a problem with it.
curl also allows users to skip it.
-- / daniel.haxx.se || https://rock-solid.curl.dev -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2025-12-15