diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2016-10-11 00:48:35 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2016-10-31 08:46:35 +0100 |
| commit | 3bb273db7e40ebc284cff45f3ce3f0475c8339c2 (patch) | |
| tree | 699d2f7d9ec71ffcfc13eb42424c1aab90edd4aa /lib/gopher.c | |
| parent | 164ee10b0b734b350f05114b78327d6985b880cc (diff) | |
urlparse: accept '#' as end of host name
'http://example.com#@127.0.0.1/x.txt' equals a request to example.com
for the '/' document with the rest of the URL being a fragment.
CVE-2016-8624
Bug: https://curl.haxx.se/docs/adv_20161102J.html
Reported-by: Fernando Muñoz
Diffstat (limited to 'lib/gopher.c')
0 files changed, 0 insertions, 0 deletions