cURL / Mailing Lists / curl-library / Single Mail

curl-library

dotdot removal

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Sun, 16 Jun 2013 15:57:33 +0200 (CEST)

Hi friends,

I just submitted this patch to bug #1200, which is a new function in libcurl
that removes ".." and "." sequences from the path part of URLs as specified by
RFC3986. Bug #1200 details how the lack of this functionality in this case
causes a failure:

   https://sourceforge.net/p/curl/bugs/1200/

This is my first version of the patch and I intend to wait until after the
7.31.0 release before I merge anything into master just to avoid havoc this
close to the release.

I'll add some further tests for this functionality too until then.

Can anyone think of reasons why YOU would want an option to disable this
functionality? (I much rather have people speak about their own needs and
wishes rather than hypothetical others.) This is a somewhat new behavior of
libcurl as we've otherwise always tried to use exactly what gets passed in as
much as possible, but this now "sanitizes" the input somewhat in a way that
possibly some users won't appreciate...

-- 
  / daniel.haxx.se


-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html

Received on 2013-06-16