mirror of
https://github.com/curl/curl.git
synced 2024-12-03 06:20:31 +08:00
da82f59b69
After a research team wrote a document[1] that found several live source codes out there in the wild that misused the CURLOPT_SSL_VERIFYHOST option thinking it was a boolean, this change now bans 1 as a value and will make libcurl return error for it. 1 was never a sensible value to use in production but was introduced back in the days to help debugging. It was always documented clearly this way. 1 was never supported by all SSL backends in libcurl, so this cleanup makes the treatment of it unified. The report's list of mistakes for this option were all PHP code and while there's a binding layer between libcurl and PHP, the PHP team has decided that they have an as thin layer as possible on top of libcurl so they will not alter or specifically filter a 'TRUE' value for this particular option. I sympathize with that position. [1] = http://daniel.haxx.se/blog/2012/10/25/libcurl-claimed-to-be-dangerous/ |
||
---|---|---|
.. | ||
.gitignore | ||
ABI | ||
curl_easy_cleanup.3 | ||
curl_easy_duphandle.3 | ||
curl_easy_escape.3 | ||
curl_easy_getinfo.3 | ||
curl_easy_init.3 | ||
curl_easy_pause.3 | ||
curl_easy_perform.3 | ||
curl_easy_recv.3 | ||
curl_easy_reset.3 | ||
curl_easy_send.3 | ||
curl_easy_setopt.3 | ||
curl_easy_strerror.3 | ||
curl_easy_unescape.3 | ||
curl_escape.3 | ||
curl_formadd.3 | ||
curl_formfree.3 | ||
curl_formget.3 | ||
curl_free.3 | ||
curl_getdate.3 | ||
curl_getenv.3 | ||
curl_global_cleanup.3 | ||
curl_global_init_mem.3 | ||
curl_global_init.3 | ||
curl_mprintf.3 | ||
curl_multi_add_handle.3 | ||
curl_multi_assign.3 | ||
curl_multi_cleanup.3 | ||
curl_multi_fdset.3 | ||
curl_multi_info_read.3 | ||
curl_multi_init.3 | ||
curl_multi_perform.3 | ||
curl_multi_remove_handle.3 | ||
curl_multi_setopt.3 | ||
curl_multi_socket_action.3 | ||
curl_multi_socket_all.3 | ||
curl_multi_socket.3 | ||
curl_multi_strerror.3 | ||
curl_multi_timeout.3 | ||
curl_multi_wait.3 | ||
curl_share_cleanup.3 | ||
curl_share_init.3 | ||
curl_share_setopt.3 | ||
curl_share_strerror.3 | ||
curl_slist_append.3 | ||
curl_slist_free_all.3 | ||
curl_strequal.3 | ||
curl_strnequal.3 | ||
curl_unescape.3 | ||
curl_version_info.3 | ||
curl_version.3 | ||
getinfo-times | ||
index.html | ||
libcurl-easy.3 | ||
libcurl-errors.3 | ||
libcurl-multi.3 | ||
libcurl-share.3 | ||
libcurl-tutorial.3 | ||
libcurl.3 | ||
libcurl.m4 | ||
Makefile.am | ||
symbols-in-versions | ||
symbols.pl |