1
0
mirror of https://github.com/moparisthebest/curl synced 2025-03-11 07:39:50 -04:00
Daniel Stenberg 3bb273db7e urlparse: accept '#' as end of host name
'http://example.com#@127.0.0.1/x.txt' equals a request to example.com
for the '/' document with the rest of the URL being a fragment.

CVE-2016-8624

Bug: https://curl.haxx.se/docs/adv_20161102J.html
Reported-by: Fernando Muñoz
2016-10-31 08:46:35 +01:00
..
2016-10-18 13:59:54 +02:00
2016-09-07 10:41:57 +02:00
2016-10-10 19:47:31 +02:00
2016-02-04 18:46:54 -05:00
2016-10-18 13:59:54 +02:00
2016-10-18 11:05:45 +02:00
2016-10-08 15:13:46 +02:00
2016-02-04 18:46:54 -05:00
2016-10-08 15:13:46 +02:00
2016-10-18 13:59:54 +02:00
2016-04-03 23:07:30 +02:00
2016-04-03 23:07:30 +02:00
2016-10-18 11:05:45 +02:00
2016-10-08 15:13:46 +02:00
2016-10-18 11:05:45 +02:00
2016-10-18 11:05:45 +02:00
2016-10-18 11:05:45 +02:00
2016-04-03 22:38:36 +02:00
2016-10-18 11:05:45 +02:00
2016-10-18 13:59:54 +02:00
2016-10-18 11:05:45 +02:00
2016-10-31 08:46:35 +01:00