moparisthebest
/
curl
mirror of https://github.com/moparisthebest/curl
1
0
Fork 0
Code Issues Releases Wiki Activity
curl/src
History
Daniel Stenberg 265b14d6b3
metalink: remove 
Warning: this will make existing curl command lines that use metalink to
stop working.

Reasons for removal:

1. We've found several security problems and issues involving the
   metalink support in curl. The issues are not detailed here. When
   working on those, it become apparent to the team that several of the
   problems are due to the system design, metalink library API and what
   the metalink RFC says. They are very hard to fix on the curl side
   only.

2. The metalink usage with curl was only very briefly documented and was
   not following the "normal" curl usage pattern in several ways, making
   it surprising and non-intuitive which could lead to further security
   issues.

3. The metalink library was last updated 6 years ago and wasn't so
   active the years before that either. An unmaintained library means
   there's a security problem waiting to happen. This is probably reason
   enough.

4. Metalink requires an XML parsing library, which is complex code (even
   the smaller alternatives) and to this day often gets security
   updates.

5. Metalink is not a widely used curl feature. In the 2020 curl user
   survey, only 1.4% of the responders said that they'd are using it. In
   2021 that number was 1.2%. Searching the web also show very few
   traces of it being used, even with other tools.

6. The torrent format and associated technology clearly won for
   downloading large files from multiple sources in parallel.

Cloes #7176
 		2021-06-07 08:14:25 +02:00
..
macos copyright: fix out-of-date copyright ranges and missing headers 2020-03-24 15:05:59 +01:00
.gitignore VC: remove the makefile.vc6 build infra 2017-01-23 14:27:32 +01:00
CMakeLists.txt copyright: update copyright year ranges to 2021 2021-05-26 08:18:11 +02:00
Makefile.am metalink: remove 2021-06-07 08:14:25 +02:00
Makefile.inc metalink: remove 2021-06-07 08:14:25 +02:00
Makefile.m32 metalink: remove 2021-06-07 08:14:25 +02:00
Makefile.netware metalink: remove 2021-06-07 08:14:25 +02:00
curl.rc copyright: fix year ranges 2020-11-05 08:22:10 +01:00
makefile.amiga curl.se: new home 2020-11-04 23:59:47 +01:00
makefile.dj copyright: fix missing year (range) updates 2021-01-29 14:35:13 +01:00
mkhelp.pl copyright: fix year ranges 2020-11-05 08:22:10 +01:00
slist_wc.c copyright: fix year ranges 2020-11-05 08:22:10 +01:00
slist_wc.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_binmode.c copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_binmode.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_bname.c copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_bname.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_cb_dbg.c curl.se: new home 2020-11-04 23:59:47 +01:00
tool_cb_dbg.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_cb_hdr.c curl.se: new home 2020-11-04 23:59:47 +01:00
tool_cb_hdr.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_cb_prg.c config: remove CURL_SIZEOF_CURL_OFF_T use only SIZEOF_CURL_OFF_T 2021-03-11 10:11:56 +01:00
tool_cb_prg.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_cb_rea.c docs/examples: adjust prototypes for CURLOPT_READFUNCTION 2020-12-30 22:20:24 +01:00
tool_cb_rea.h docs/examples: adjust prototypes for CURLOPT_READFUNCTION 2020-12-30 22:20:24 +01:00
tool_cb_see.c config: remove CURL_SIZEOF_CURL_OFF_T use only SIZEOF_CURL_OFF_T 2021-03-11 10:11:56 +01:00
tool_cb_see.h curl.se: new home 2020-11-04 23:59:47 +01:00
tool_cb_wrt.c curl.se: new home 2020-11-04 23:59:47 +01:00
tool_cb_wrt.h curl.se: new home 2020-11-04 23:59:47 +01:00
tool_cfgable.c cookies: Support multiple -b parameters 2021-02-25 18:12:28 +01:00
tool_cfgable.h metalink: remove 2021-06-07 08:14:25 +02:00
tool_convert.c tidy-up: make conditional checks more consistent 2021-04-22 09:10:17 +02:00
tool_convert.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_dirhie.c curl.se: new home 2020-11-04 23:59:47 +01:00
tool_dirhie.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_doswin.c copyright: fix missing year (range) updates 2021-01-29 14:35:13 +01:00
tool_doswin.h curl.se: new home 2020-11-04 23:59:47 +01:00
tool_easysrc.c curl.se: new home 2020-11-04 23:59:47 +01:00
tool_easysrc.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_filetime.c curl: include the file name in --xattr/--remote-time error msgs 2021-01-27 08:45:11 +01:00
tool_filetime.h curl: move fprintf outputs to warnf 2021-01-27 08:45:02 +01:00
tool_formparse.c misc: fix "warning: empty expression statement has no effect" 2020-12-26 23:44:17 +01:00
tool_formparse.h curl.se: new home 2020-11-04 23:59:47 +01:00
tool_getparam.c metalink: remove 2021-06-07 08:14:25 +02:00
tool_getparam.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_getpass.c curl.se: new home 2020-11-04 23:59:47 +01:00
tool_getpass.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_help.c metalink: remove 2021-06-07 08:14:25 +02:00
tool_help.h curl.se: new home 2020-11-04 23:59:47 +01:00
tool_helpers.c copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_helpers.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_homedir.c curl: add compatibility for Amiga and GCC 6.5 2020-11-20 23:36:51 +01:00
tool_homedir.h curl.se: new home 2020-11-04 23:59:47 +01:00
tool_hugehelp.c.cvs curl.se: new home 2020-11-04 23:59:47 +01:00
tool_hugehelp.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_libinfo.c curl.h: add CURLPROTO_GOPHERS as own protocol identifier 2021-01-06 15:23:41 +01:00
tool_libinfo.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_main.c metalink: remove 2021-06-07 08:14:25 +02:00
tool_main.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_msgs.c copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_msgs.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_operate.c metalink: remove 2021-06-07 08:14:25 +02:00
tool_operate.h metalink: remove 2021-06-07 08:14:25 +02:00
tool_operhlp.c metalink: remove 2021-06-07 08:14:25 +02:00
tool_operhlp.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_panykey.c curl.se: new home 2020-11-04 23:59:47 +01:00
tool_panykey.h curl.se: new home 2020-11-04 23:59:47 +01:00
tool_paramhlp.c copyright: update copyright year ranges to 2021 2021-03-27 23:00:14 +01:00
tool_paramhlp.h curl: add --create-file-mode [mode] 2020-12-21 10:52:41 +01:00
tool_parsecfg.c curl.se: new home 2020-11-04 23:59:47 +01:00
tool_parsecfg.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_progress.c tool_progress: Fix progress meter in parallel mode 2021-04-05 23:43:26 -04:00
tool_progress.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_sdecls.h metalink: remove 2021-06-07 08:14:25 +02:00
tool_setopt.c copyright: update copyright year ranges to 2021 2021-05-26 08:18:11 +02:00
tool_setopt.h copyright: update copyright year ranges to 2021 2021-05-26 08:18:11 +02:00
tool_setup.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_sleep.c curl.se: new home 2020-11-04 23:59:47 +01:00
tool_sleep.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_strdup.c curl.se: new home 2020-11-04 23:59:47 +01:00
tool_strdup.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_urlglob.c curl.se: new home 2020-11-04 23:59:47 +01:00
tool_urlglob.h curl.se: new home 2020-11-04 23:59:47 +01:00
tool_util.c curl.se: new home 2020-11-04 23:59:47 +01:00
tool_util.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_version.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_vms.c tidy-up: make conditional checks more consistent 2021-04-22 09:10:17 +02:00
tool_vms.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00
tool_writeout.c tool_writeout: fix the HTTP_CODE json output 2021-04-17 11:03:30 +02:00
tool_writeout.h http: add support to read and store the referrer header 2021-02-19 13:57:19 +00:00
tool_writeout_json.c copyright: update copyright year ranges to 2021 2021-03-27 23:00:14 +01:00
tool_writeout_json.h copyright: update copyright year ranges to 2021 2021-03-27 23:00:14 +01:00
tool_xattr.c http: add support to read and store the referrer header 2021-02-19 13:57:19 +00:00
tool_xattr.h copyright: fix year ranges 2020-11-05 08:22:10 +01:00