[quake3-commits] [ioquake/ioq3] bae862: Only allow safe protocols for cURL downloads

Mickaël Thomas mickael9 at gmail.com
Tue Aug 15 22:47:30 EDT 2017


  Branch: refs/heads/master
  Home:   https://github.com/ioquake/ioq3
  Commit: bae86208f94499fbd49ac8c87289153ad8169a9d
      https://github.com/ioquake/ioq3/commit/bae86208f94499fbd49ac8c87289153ad8169a9d
  Author: Mickaël Thomas <mickael9 at gmail.com>
  Date:   2017-08-15 (Tue, 15 Aug 2017)

  Changed paths:
    M code/client/cl_curl.c

  Log Message:
  -----------
  Only allow safe protocols for cURL downloads

A malicious server could abuse dangerous protocols such as gopher:// to,
for instance, send mail via SMTP.




More information about the quake3-commits mailing list