aboutsummaryrefslogtreecommitdiff
path: root/tests/data/test228
diff options
context:
space:
mode:
authorYAMADA Yasuharu <yasuharu.yamada@access-company.com>2013-04-11 00:17:15 +0200
committerDaniel Stenberg <daniel@haxx.se>2013-04-11 23:52:12 +0200
commit2eb8dcf26cb37f09cffe26909a646e702dbcab66 (patch)
treebb1b22e9302afec2abe6e795533b9860ab691298 /tests/data/test228
parent96ffe645fd2494f14780f7c105fcfeeb8ca7d94f (diff)
cookie: fix tailmatching to prevent cross-domain leakage
Cookies set for 'example.com' could accidentaly also be sent by libcurl to the 'bexample.com' (ie with a prefix to the first domain name). This is a security vulnerabilty, CVE-2013-1944. Bug: http://curl.haxx.se/docs/adv_20130412.html
Diffstat (limited to 'tests/data/test228')
0 files changed, 0 insertions, 0 deletions