Go to file
Daniel Stenberg eb0167ff7d
urlapi: reject more bad characters from the host name field
Extended test 1560 to verify

Report from the ongoing source code audit by Trail of Bits.

Closes #9608
2022-09-28 08:22:42 +02:00
.circleci CI: skip make, do make install at once for dependencies 2022-09-13 15:42:10 +02:00
.github GHA: spellcheck 2022-09-21 15:20:07 +02:00
.lift copyright: make repository REUSE compliant 2022-06-13 09:13:00 +02:00
.reuse reuse/dep5: adjusted to parse better 2022-06-14 14:07:02 +02:00
CMake lib: add required Win32 setup definitions in setup-win32.h 2022-09-06 19:29:44 +02:00
docs configure: deprecate builds with small curl_off_t 2022-09-28 08:19:06 +02:00
include curl.h: fix mention of wrong error code in comment 2022-09-22 09:43:39 +02:00
lib urlapi: reject more bad characters from the host name field 2022-09-28 08:22:42 +02:00
LICENSES examples/curlx.c: remove 2022-08-18 00:00:12 +02:00
m4 autotools: allow --enable-symbol-hiding with windows 2022-09-25 22:19:13 +00:00
packages tidy-up: delete unused build configuration macros 2022-07-19 15:12:19 +00:00
plan9 copyright: make repository REUSE compliant 2022-06-13 09:13:00 +02:00
projects docs: spellfixes 2022-09-21 15:20:08 +02:00
scripts scripts: use grep -E instead of egrep 2022-09-13 10:18:50 +02:00
src tool: remove dead code 2022-09-23 13:55:52 +02:00
tests urlapi: reject more bad characters from the host name field 2022-09-28 08:22:42 +02:00
winbuild docs: spellfixes 2022-09-21 15:20:08 +02:00
zuul.d zuul: remove the clang-tidy job 2022-08-30 15:40:03 +02:00
.azure-pipelines.yml test972: verify the output without using external tool 2022-09-22 13:46:40 +02:00
.cirrus.yml cirrus: enable websockets in the windows builds 2022-09-09 15:11:14 +02:00
.dcignore copyright: make repository REUSE compliant 2022-06-13 09:13:00 +02:00
.dir-locals.el copyright: make repository REUSE compliant 2022-06-13 09:13:00 +02:00
.git-blame-ignore-revs git: ignore large commit making the curl REUSE compliant 2022-06-13 09:14:07 +02:00
.gitattributes copyright: make repository REUSE compliant 2022-06-13 09:13:00 +02:00
.gitignore copyright: make repository REUSE compliant 2022-06-13 09:13:00 +02:00
.lgtm.yml copyright: make repository REUSE compliant 2022-06-13 09:13:00 +02:00
.mailmap mailmap: merge Philip Heiduck's two addresses into one 2022-09-16 16:46:32 +02:00
acinclude.m4 autotools: reduce brute-force when detecting recv/send arg list 2022-09-25 21:58:21 +00:00
appveyor.yml appveyor: enable websockets 2022-09-09 15:11:15 +02:00
buildconf copyright: make repository REUSE compliant 2022-06-13 09:13:00 +02:00
buildconf.bat buildconf.bat: update copyright year range 2022-06-14 14:06:55 +02:00
CHANGES
CMakeLists.txt mprintf: use snprintf if available 2022-09-22 23:06:26 +02:00
configure.ac configure: deprecate builds with small curl_off_t 2022-09-28 08:19:06 +02:00
COPYING COPYING: bump copyright year range 2022-01-05 23:14:15 +01:00
curl-config.in curl-config: quote directories with potential space 2022-08-10 14:35:40 +02:00
GIT-INFO GIT-INFO: rephrase to adapt to s/buildconf/autoreconf 2021-09-24 13:14:52 +02:00
libcurl.pc.in copyright: make repository REUSE compliant 2022-06-13 09:13:00 +02:00
MacOSX-Framework scripts: use grep -E instead of egrep 2022-09-13 10:18:50 +02:00
Makefile.am copyright: make repository REUSE compliant 2022-06-13 09:13:00 +02:00
Makefile.dist copyright: make repository REUSE compliant 2022-06-13 09:13:00 +02:00
maketgz copyright: make repository REUSE compliant 2022-06-13 09:13:00 +02:00
mlc_config.json mlc: curl.zuul.vexxhost.dev is reachable again 2022-04-24 23:29:38 +02:00
README docs: fix proselint complaints 2022-09-19 17:32:12 +02:00
README.md docs: spellfixes 2022-09-21 15:20:08 +02:00
RELEASE-NOTES RELEASE-NOTES: synced 2022-09-27 13:09:44 +02:00
SECURITY.md docs: spellfixes 2022-09-21 15:20:08 +02:00

curl logo

OpenSSF Best Practices Coverity passed AppVeyor Build Status Azure DevOps Build Status Cirrus Build Status GitHub Actions Linux Build Status GitHub Actions macOS Build Status Backers on Open Collective Sponsors on Open Collective Language Grade: C/C++ Fuzzing Status REUSE status

Curl is a command-line tool for transferring data specified with URL syntax. Find out how to use curl by reading the curl.1 man page or the MANUAL document. Find out how to install Curl by reading the INSTALL document.

libcurl is the library curl is using to do its job. It is readily available to be used by your software. Read the libcurl.3 man page to learn how.

You can find answers to the most frequent questions we get in the FAQ document.

Study the COPYING file for distribution terms.

Contact

If you have problems, questions, ideas or suggestions, please contact us by posting to a suitable mailing list.

All contributors to the project are listed in the THANKS document.

Commercial support

For commercial support, maybe private and dedicated help with your problems or applications using (lib)curl visit the support page.

Website

Visit the curl website for the latest news and downloads.

Git

To download the latest source from the Git server do this:

git clone https://github.com/curl/curl.git

(you will get a directory named curl created, filled with the source code)

Security problems

Report suspected security problems via our HackerOne page and not in public.

Notice

Curl contains pieces of source code that is Copyright (c) 1998, 1999 Kungliga Tekniska Högskolan. This notice is included here to comply with the distribution terms.

Backers

Thank you to all our backers! 🙏 [Become a backer]

Open Collective Backers

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]

Open Collective Sponsor 0 Open Collective Sponsor 1 Open Collective Sponsor 2 Open Collective Sponsor 3 Open Collective Sponsor 4 Open Collective Sponsor 5 Open Collective Sponsor 6 Open Collective Sponsor 7 Open Collective Sponsor 8 Open Collective Sponsor 9