1
0
mirror of https://github.com/moparisthebest/curl synced 2024-12-21 23:58:49 -05:00
Go to file
Daniel Stenberg 042cc1f69e - David Kierznowski notified us about a security flaw
(http://curl.haxx.se/docs/adv_20090303.html also known as CVE-2009-0037) in
  which previous libcurl versions (by design) can be tricked to access an
  arbitrary local/different file instead of a remote one when
  CURLOPT_FOLLOWLOCATION is enabled. This flaw is now fixed in this release
  together this the addition of two new setopt options for controlling this
  new behavior:

  o CURLOPT_REDIR_PROTOCOLS controls what protocols libcurl is allowed to
  follow to when CURLOPT_FOLLOWLOCATION is enabled. By default, this option
  excludes the FILE and SCP protocols and thus you nee to explicitly allow
  them in your app if you really want that behavior.

  o CURLOPT_PROTOCOLS controls what protocol(s) libcurl is allowed to fetch
  using the primary URL option. This is useful if you want to allow a user or
  other outsiders control what URL to pass to libcurl and yet not allow all
  protocols libcurl may have been built to support.
2009-03-02 23:05:31 +00:00
ares Do not halt compilation when using VS2008 to build a Windows 2000 target 2009-02-20 11:30:11 +00:00
docs - David Kierznowski notified us about a security flaw 2009-03-02 23:05:31 +00:00
include - David Kierznowski notified us about a security flaw 2009-03-02 23:05:31 +00:00
lib - David Kierznowski notified us about a security flaw 2009-03-02 23:05:31 +00:00
m4 ignore 2009-02-13 06:34:44 +00:00
packages Continue sync work on OS400 specific code and RPG binding. 2009-02-17 16:16:07 +00:00
perl David Shaw finally removed all traces of Gopher and we are now officially 2006-01-16 22:14:37 +00:00
src Do not halt compilation when using VS2008 to build a Windows 2000 target 2009-02-20 11:30:11 +00:00
tests verify that a 550-response for a RETR returns 78 but also that the control 2009-02-19 13:47:06 +00:00
.cvsignore ignore another file that might be generated 2008-07-28 12:36:51 +00:00
acinclude.m4 - Based on bug report #2498665 (http://curl.haxx.se/bug/view.cgi?id=2498665) 2009-01-11 23:41:50 +00:00
buildconf Remove following files generated on previous buildconf run: 2009-02-13 06:25:35 +00:00
buildconf.bat Initial support of curlbuild.h and curlrules.h which allows 2008-08-07 00:29:08 +00:00
CHANGES - David Kierznowski notified us about a security flaw 2009-03-02 23:05:31 +00:00
CHANGES.0 Moved all changes from 2007 from CHANGES to CHANGES.0 2008-06-06 22:11:24 +00:00
configure.ac check for poll() as it is done for other functions 2009-02-13 05:49:58 +00:00
COPYING bump year 2009-01-11 23:48:20 +00:00
curl-config.in Fixed curl-config when no features are enabled. 2008-09-03 19:10:48 +00:00
curl-style.el removed tabs and trailing whitespace from source 2004-10-06 07:50:18 +00:00
CVS-INFO Updated some out-of-date information. 2008-02-13 23:06:21 +00:00
diff-exclude improved 2009-02-24 09:42:39 +00:00
install-sh Initial revision 1999-12-29 14:20:26 +00:00
libcurl.pc.in - Keith Mok added supported_protocols and supported_features to the pkg-config 2008-09-02 12:07:08 +00:00
MacOSX-Framework Daniel Johnson provided a shell script that will perform all the steps needed 2009-02-23 12:39:06 +00:00
Makefile.am adjustment for new Mac OS X framework build script 2009-02-23 14:34:40 +00:00
Makefile.dist Karl Moerder removed wsock32.lib from the vc9 makefiles 2009-01-13 23:29:56 +00:00
maketgz lzma compressed tarballs too for some testing, it does produce MUCH smaller 2009-02-23 09:36:08 +00:00
missing added the most recent one from automake 1.5, it complained on the former 2001-08-28 09:01:50 +00:00
mkinstalldirs Make mkinstalldirs ignore umask, for consistency with the rest of the 2008-02-01 20:34:27 +00:00
README don't use the mirrors anymore 2008-08-28 11:40:37 +00:00
RELEASE-NOTES - David Kierznowski notified us about a security flaw 2009-03-02 23:05:31 +00:00
sample.emacs fixed spell, removed reference to a 'tools' subdir in the curl dir, as we 2004-06-04 07:21:12 +00:00
TODO-RELEASE 7.19.4 won't get anything else 2009-03-02 10:43:46 +00:00
vc6curl.dsw - I renamed everything in the windows builds files that used the name 'curllib' 2009-02-23 09:36:54 +00:00

                                  _   _ ____  _
                              ___| | | |  _ \| |
                             / __| | | | |_) | |
                            | (__| |_| |  _ <| |___
                             \___|\___/|_| \_\_____|

README

  Curl is a command line tool for transferring data specified with URL
  syntax. Find out how to use curl by reading the curl.1 man page or the
  MANUAL document. Find out how to install Curl by reading the INSTALL
  document.

  libcurl is the library curl is using to do its job. It is readily
  available to be used by your software. Read the libcurl.3 man page to
  learn how!

  You find answers to the most frequent questions we get in the FAQ document.

  Study the COPYING file for distribution terms and similar. If you distribute
  curl binaries or other binaries that involve libcurl, you might enjoy the
  LICENSE-MIXING document.

CONTACT

  If you have problems, questions, ideas or suggestions, please contact us
  by posting to a suitable mailing list. See http://curl.haxx.se/mail/

  All contributors to the project are listed in the THANKS document.

WEB SITE

  Visit the curl web site for the latest news and downloads:

        http://curl.haxx.se/

CVS

  To download the very latest source off the CVS server do this:

   cvs -d :pserver:anonymous@cool.haxx.se:/cvsroot/curl login

  (just press enter when asked for password)

   cvs -d :pserver:anonymous@cool.haxx.se:/cvsroot/curl co curl

  (you'll get a directory named curl created, filled with the source code)

NOTICE

  Curl contains pieces of source code that is Copyright (c) 1998, 1999
  Kungliga Tekniska Högskolan. This notice is included here to comply with the
  distribution terms.