1
0
mirror of https://github.com/moparisthebest/curl synced 2024-11-17 15:05:02 -05:00
curl/docs/libcurl
Daniel Stenberg 042cc1f69e - David Kierznowski notified us about a security flaw
(http://curl.haxx.se/docs/adv_20090303.html also known as CVE-2009-0037) in
  which previous libcurl versions (by design) can be tricked to access an
  arbitrary local/different file instead of a remote one when
  CURLOPT_FOLLOWLOCATION is enabled. This flaw is now fixed in this release
  together this the addition of two new setopt options for controlling this
  new behavior:

  o CURLOPT_REDIR_PROTOCOLS controls what protocols libcurl is allowed to
  follow to when CURLOPT_FOLLOWLOCATION is enabled. By default, this option
  excludes the FILE and SCP protocols and thus you nee to explicitly allow
  them in your app if you really want that behavior.

  o CURLOPT_PROTOCOLS controls what protocol(s) libcurl is allowed to fetch
  using the primary URL option. This is useful if you want to allow a user or
  other outsiders control what URL to pass to libcurl and yet not allow all
  protocols libcurl may have been built to support.
2009-03-02 23:05:31 +00:00
..
.cvsignore ignore .ps and .pdf files too 2002-10-14 07:47:40 +00:00
ABI minor language fix 2008-06-30 09:39:26 +00:00
curl_easy_cleanup.3 1) the talk about strings used by libcurl doesn't apply to libcurl >= 7.17.0 2007-08-22 11:28:26 +00:00
curl_easy_duphandle.3 removed the BUGS section since it offers nothing good 2004-04-13 09:08:52 +00:00
curl_easy_escape.3 "tag" the function referals properly 2008-04-09 11:27:47 +00:00
curl_easy_getinfo.3 - After a bug reported by James Cheng I've made curl_easy_getinfo() for 2009-02-23 18:45:00 +00:00
curl_easy_init.3 Bryan Henderson turned the 'initialized' variable for curl_global_init() 2006-01-15 23:55:53 +00:00
curl_easy_pause.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_easy_perform.3 formatting update to produce better links with the new roffit version 2004-02-27 15:34:06 +00:00
curl_easy_recv.3 - Introducing curl_easy_send() and curl_easy_recv(). They can be used to send 2008-05-12 21:43:24 +00:00
curl_easy_reset.3 minor edits 2006-01-02 23:32:36 +00:00
curl_easy_send.3 - Introducing curl_easy_send() and curl_easy_recv(). They can be used to send 2008-05-12 21:43:24 +00:00
curl_easy_setopt.3 - David Kierznowski notified us about a security flaw 2009-03-02 23:05:31 +00:00
curl_easy_strerror.3 minor edits 2006-01-02 23:32:36 +00:00
curl_easy_unescape.3 "tag" the function referals properly 2008-04-09 11:27:47 +00:00
curl_escape.3 First commit of David McCreedy's EBCDIC and TPF changes. 2006-04-07 21:50:47 +00:00
curl_formadd.3 Mohun Biswas clarified 2009-01-12 21:22:51 +00:00
curl_formfree.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_formget.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_free.3 formatting update to produce better links with the new roffit version 2004-02-27 15:34:06 +00:00
curl_getdate.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_getenv.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_global_cleanup.3 fixed formatting 2006-02-17 13:31:49 +00:00
curl_global_init_mem.3 new man page 2004-05-12 08:10:25 +00:00
curl_global_init.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_mprintf.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_multi_add_handle.3 Christopher Palow's multi interface docs updates 2008-05-24 19:19:49 +00:00
curl_multi_assign.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_multi_cleanup.3 additional info 2004-04-13 14:27:47 +00:00
curl_multi_fdset.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_multi_info_read.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_multi_init.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_multi_perform.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_multi_remove_handle.3 clarify 2003-03-10 20:43:59 +00:00
curl_multi_setopt.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_multi_socket_all.3 The inital early embryos to describe the curl_multi_socket() API. Committed 2005-12-22 15:11:11 +00:00
curl_multi_socket.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_multi_strerror.3 minor edits 2006-01-02 23:32:36 +00:00
curl_multi_timeout.3 - mention curl_multi_socket_action() rather than the deprecated 2008-08-06 21:22:07 +00:00
curl_share_cleanup.3 Bertrand Demiddelaer's correction 2004-09-16 14:26:04 +00:00
curl_share_init.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_share_setopt.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_share_strerror.3 minor edits 2006-01-02 23:32:36 +00:00
curl_slist_append.3 corrected example 2007-01-09 18:58:16 +00:00
curl_slist_free_all.3 formatting update to produce better links with the new roffit version 2004-02-27 15:34:06 +00:00
curl_strequal.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_strnequal.3 prepend the man3 dir to the file name to work better. 2004-04-02 11:04:34 +00:00
curl_unescape.3 First commit of David McCreedy's EBCDIC and TPF changes. 2006-04-07 21:50:47 +00:00
curl_version_info.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
curl_version.3 mention curl_version_info 2003-08-11 23:07:38 +00:00
getinfo-times first rough version 2005-06-03 21:38:40 +00:00
index.html - Introducing curl_easy_send() and curl_easy_recv(). They can be used to send 2008-05-12 21:43:24 +00:00
libcurl-easy.3 minor update edits 2004-05-05 06:11:57 +00:00
libcurl-errors.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
libcurl-multi.3 Anthony Bryan's man page cleanup in language and spelling 2008-12-28 21:56:56 +00:00
libcurl-share.3 better mentioning of other functions to create proper hrefs in the web 2004-03-15 10:23:14 +00:00
libcurl-tutorial.3 further clarifcation based on input from Anthony Bryan 2008-12-29 21:26:11 +00:00
libcurl.3 - Anthony Bryan provided a set of patches that cleaned up manual language, 2008-12-22 13:07:13 +00:00
libcurl.m4 Ian Turner fixed the libcurl.m4 macro's support for --with-libcurl. 2007-02-19 12:37:04 +00:00
Makefile.am include the symbols-in-versions file in the release archive 2009-02-10 12:39:26 +00:00
symbols-in-versions - David Kierznowski notified us about a security flaw 2009-03-02 23:05:31 +00:00