Change #282497
| Category | curl |
| Changed by | Filippo Tedeschi <filippotedeschi98@gmail.com> |
| Changed at | Mon 21 Sep 2026 17:10:18 |
| Repository | https://github.com/curl/curl.git |
| Project | curl |
| Branch | master |
| Revision | ce359773039d9925935ae21f345c312742b1fea9 |
Comments
getinfo: make sure CURLINFO_REDIRECT_URL does not contain creds
Follow-up to 7a6bd02: make sure data->info.wouldredirect (exposed via
CURLINFO_REDIRECT_URL and %{redirect_url}) does not contain credentials
inherited from the original request URL or netrc when resolving relative
redirect targets in FOLLOW_FAKE mode.
Verified in test 1877
Closes #23020
Changed files
- lib/http.c
- tests/data/Makefile.am
- tests/data/test1877