Buy commercial curl support from WolfSSL. We help you work
out your issues, debug your libcurl applications, use the API, port to new
platforms, add new features and more. With a team lead by the curl founder
himself.
Re: Proposal: URL API extension, second setter function to allow setting from CURLU object
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Mon, 23 Oct 2023 17:17:51 +0200 (CEST)
On Mon, 23 Oct 2023, Timothe Litt via curl-library wrote:
> If you need more than libcurl's features for manipulating URIs, there are
> other C libraries that are widely available, e.g.
> https://uriparser.github.io/ (https://github.com/uriparser/uriparser)
However, if you are using libcurl I *strongly* suggest you use libcurl's
parser, as it has been shown many times that mixing parsers is a common recipe
for (security) problems. I blogged about that last year, but I am not the
first and not the last:
https://daniel.haxx.se/blog/2022/01/10/dont-mix-url-parsers/
Date: Mon, 23 Oct 2023 17:17:51 +0200 (CEST)
On Mon, 23 Oct 2023, Timothe Litt via curl-library wrote:
> If you need more than libcurl's features for manipulating URIs, there are
> other C libraries that are widely available, e.g.
> https://uriparser.github.io/ (https://github.com/uriparser/uriparser)
However, if you are using libcurl I *strongly* suggest you use libcurl's
parser, as it has been shown many times that mixing parsers is a common recipe
for (security) problems. I blogged about that last year, but I am not the
first and not the last:
https://daniel.haxx.se/blog/2022/01/10/dont-mix-url-parsers/
-- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes, support, ports, new features | https://curl.se/support.html -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2023-10-23