[curl/curl] 2b298a: hostip: make 'localhost' return fixed values

  Branch: refs/heads/bagder/fixed-localhost
  Home:   https://github.com/curl/curl
  Commit: 2b298a28ac3d3dd604be6521d21e327121b7b6e7
      https://github.com/curl/curl/commit/2b298a28ac3d3dd604be6521d21e327121b7b6e7
  Author: Daniel Stenberg <[email protected]>
  Date:   2021-05-10 (Mon, 10 May 2021)

  Changed paths:
    M lib/hostip.c

  Log Message:
  -----------
  hostip: make 'localhost' return fixed values

Resolving the case insensitive host name 'localhost' now returns the
addresses 127.0.0.1 and (if IPv6 is enabled) ::1 without using any
resolver.

This removes the risk that users accidentally resolves 'localhost' to
something else. By masking sure 'localhost' is always local, we can
assume a "secure context" for such transfers (for cookies etc).


_______________________________________________
curl-commits mailing list
[email protected]
https://cool.haxx.se/cgi-bin/mailman/listinfo/curl-commits