Go to file
Daniel Stenberg af32cd3859
http: prevent custom Authorization headers in redirects
... unless CURLOPT_UNRESTRICTED_AUTH is set to allow them. This matches how
curl already handles Authorization headers created internally.

Note: this changes behavior slightly, for the sake of reducing mistakes.

Added test 317 and 318 to verify.

Reported-by: Craig de Stigter
Bug: https://curl.haxx.se/docs/adv_2018-b3bf.html
2018-01-22 10:00:00 +01:00
.github
CMake
docs http: prevent custom Authorization headers in redirects 2018-01-22 10:00:00 +01:00
include
lib http: prevent custom Authorization headers in redirects 2018-01-22 10:00:00 +01:00
m4
packages setopt: reintroduce non-static Curl_vsetopt() for OS400 support 2018-01-13 01:28:19 +01:00
projects
scripts
src curl: progress bar refresh, get width using ioctl() 2018-01-22 08:29:37 +01:00
tests http: prevent custom Authorization headers in redirects 2018-01-22 10:00:00 +01:00
winbuild
.dir-locals.el
.gitattributes
.gitignore
.mailmap
.travis.yml
acinclude.m4
appveyor.yml
buildconf
buildconf.bat
CHANGES
CMakeLists.txt
configure.ac configure.ac: append extra linker flags instead of prepending them. 2018-01-13 10:46:57 +01:00
COPYING
curl-config.in
GIT-INFO
libcurl.pc.in
MacOSX-Framework
Makefile.am
Makefile.dist
maketgz
README
README.md
RELEASE-NOTES RELEASE-NOTES: synced with bb0ffcc36 2018-01-20 22:41:20 +01:00

curl logo

CII Best Practices Coverity passed Build Status Coverage Status

Curl is a command-line tool for transferring data specified with URL syntax. Find out how to use curl by reading the curl.1 man page or the MANUAL document. Find out how to install Curl by reading the INSTALL document.

libcurl is the library curl is using to do its job. It is readily available to be used by your software. Read the libcurl.3 man page to learn how!

You find answers to the most frequent questions we get in the FAQ document.

Study the COPYING file for distribution terms and similar. If you distribute curl binaries or other binaries that involve libcurl, you might enjoy the LICENSE-MIXING document.

Contact

If you have problems, questions, ideas or suggestions, please contact us by posting to a suitable mailing list.

All contributors to the project are listed in the THANKS document.

Website

Visit the curl web site for the latest news and downloads.

Git

To download the very latest source off the Git server do this:

git clone https://github.com/curl/curl.git

(you'll get a directory named curl created, filled with the source code)

Notice

Curl contains pieces of source code that is Copyright (c) 1998, 1999 Kungliga Tekniska Högskolan. This notice is included here to comply with the distribution terms.