Re: Limit the URL size more?
Daniel Stenberg via curl-library <[email protected]> Mon, 15 Dec 2025 07:46:34 +0100 (CET)
| Newsgroups | gmane.comp.web.curl.library |
|---|---|
| Message-ID | <[email protected]> |
On Sun, 14 Dec 2025, Jeffrey Walton wrote: > A url of http://www.example.com/image/../image.jpeg should result in an > invalid path at the server and return an error to the client since there is > no image/ subdirectory at document root. Your opinion on this does not seem backed by the specifications. curl has removed dotdot sequences by default for the last dozen years and people are not having a problem with it. curl also allows users to skip it. -- / daniel.haxx.se || https://rock-solid.curl.dev -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.html