curl/docs at 042cc1f69ec0878f542667cb684378869f859911 - curl

mirror of https://github.com/moparisthebest/curl synced 2024-11-05 09:05:04 -05:00

History

Daniel Stenberg 042cc1f69e - David Kierznowski notified us about a security flaw (http://curl.haxx.se/docs/adv_20090303.html also known as CVE-2009-0037) in which previous libcurl versions (by design) can be tricked to access an arbitrary local/different file instead of a remote one when CURLOPT_FOLLOWLOCATION is enabled. This flaw is now fixed in this release together this the addition of two new setopt options for controlling this new behavior: o CURLOPT_REDIR_PROTOCOLS controls what protocols libcurl is allowed to follow to when CURLOPT_FOLLOWLOCATION is enabled. By default, this option excludes the FILE and SCP protocols and thus you nee to explicitly allow them in your app if you really want that behavior. o CURLOPT_PROTOCOLS controls what protocol(s) libcurl is allowed to fetch using the primary URL option. This is useful if you want to allow a user or other outsiders control what URL to pass to libcurl and yet not allow all protocols libcurl may have been built to support.		2009-03-02 23:05:31 +00:00
..
examples	make this example not only replace an internal header but also add a totally	2009-01-12 21:29:23 +00:00
libcurl	- David Kierznowski notified us about a security flaw	2009-03-02 23:05:31 +00:00
.cvsignore	ignore .ps and .pdf files too	2002-10-14 07:47:40 +00:00
BINDINGS	the Eiffel binding	2009-03-02 09:03:11 +00:00
BUGS	minor addition, re-count of the number of lines of code	2007-07-19 21:35:36 +00:00
CONTRIBUTE	I check the code right now and while() and if() are in majority over while ()	2007-11-05 09:31:30 +00:00
curl-config.1	- Anthony Bryan provided a set of patches that cleaned up manual language,	2008-12-22 13:07:13 +00:00
curl.1	mention the '-o -' trick	2009-02-27 13:52:05 +00:00
DISTRO-DILEMMA	updated with recent info and cut out some of the more speculating parts and	2007-02-11 10:10:08 +00:00
FAQ	4.17 Non-functional connect timeouts	2009-02-23 21:21:00 +00:00
FEATURES	Thomas J. Moore provided a patch that introduces Kerberos5 support in	2007-07-01 22:01:18 +00:00
HISTORY	filled in SONAME number bump info, after some CVS digging	2008-12-03 15:20:06 +00:00
index.html	added doctype tag to get HTML compliant	2004-04-27 07:05:22 +00:00
INSTALL	- I renamed everything in the windows builds files that used the name 'curllib'	2009-02-23 09:36:54 +00:00
INSTALL.devcpp	Internal time differences now use monotonic time source if available.	2008-05-09 16:31:51 +00:00
INTERNALS	let's try to maintain compatibility with NSS 3.11.x	2008-06-26 07:53:44 +00:00
KNOWN_BUGS	#45 . libcurl built to support ipv6 uses getaddrinfo() to resolve host names.	2009-02-09 16:09:45 +00:00
LICENSE-MIXING	Added a libssh2 section.	2007-03-29 21:01:07 +00:00
Makefile.am	Tom Kyer's DevCpp-Mingw Install & Compilation guide	2005-10-28 21:34:51 +00:00
MANUAL	Anthony Bryan's letter=>symbol fixes	2009-02-13 09:12:52 +00:00
README.netware	added line where to find compile instructions.	2004-07-05 02:34:17 +00:00
README.win32	Peteris Krumins pointed out some MingW32 related build issues.	2007-08-03 11:46:00 +00:00
RESOURCES	turned this into a list of documents/standards curl adheres to	2003-10-16 15:04:06 +00:00
SSLCERTS	- We're no longer providing a very old ca-bundle in the curl tarball. You can	2008-02-18 11:35:12 +00:00
THANKS	17 new contributors from the 7.19.3 release	2009-01-19 10:24:19 +00:00
TheArtOfHttpScripting	s/you you/you/ thanks to hexo6 at wp.pl	2008-08-27 08:01:59 +00:00
TODO	Added support for Digest and NTLM authentication using GnuTLS.	2009-02-12 20:48:40 +00:00
VERSIONS	updated	2005-05-13 23:00:06 +00:00

README.win32

                                  _   _ ____  _     
                              ___| | | |  _ \| |    
                             / __| | | | |_) | |    
                            | (__| |_| |  _ <| |___ 
                             \___|\___/|_| \_\_____|

README.win32

  Read the README file first.

  Curl has been compiled, built and run on all sorts of Windows and win32
  systems. While not being the main develop target, a fair share of curl users
  are win32-based.

  The unix-style man pages are tricky to read on windows, so therefore are all
  those pages converted to HTML as well as pdf, and included in the release
  archives.

  The main curl.1 man page is also "built-in" in the command line tool. Use a
  command line similar to this in order to extract a separate text file:

        curl -M >manual.txt

  Read the INSTALL file for instructions how to compile curl self.