Ok, here's my first take at a patch that removes .. and . sequences from the path. There's also a unit test for the function but I believe it still doesn't handle fragments properly in combination with ../-removal.

Attachment: 0001-dotdot-introducing-dot-file-path-cleanup.patch (13.3 kB; text/x-patch)

---
** [bugs:#1200] Remove Dot Segments in redirect URLs**
**Status:** open-confirmed
**Created:** Wed Feb 27, 2013 06:29 PM UTC by Alex Vinnik
**Last Updated:** Sat Jun 15, 2013 09:57 PM UTC
**Owner:** Daniel Stenberg
$ ~/bin/curl -V 
curl 7.29.1-DEV (i686-pc-linux-gnu) libcurl/7.29.1-DEV OpenSSL/1.0.1 zlib/ 
1.2.3.4 libidn/1.23 librtmp/2.3 
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 
pop3s rtmp rtsp smtp smtps telnet tftp 
Features: IDN IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP 
http://curl.haxx.se/mail/lib-2013-02/0345.html
https://groups.google.com/a/chromium.org/forum/?fromgroups=#!topic/chromium-discuss/Aa_gQn40-zE/overview
---
Sent from sourceforge.net because you indicated interest in <https://sourceforge.net/p/curl/bugs/1200/>
To unsubscribe from further messages, please visit <https://sourceforge.net/auth/subscriptions/>