curl/lib
Daniel Stenberg 5af0165562
cookie: check __Secure- and __Host- case sensitively
While most keywords in cookies are case insensitive, these prefixes are
specified explicitly to get checked "with a case-sensitive match".

(From the 6265bis document in progress)

Ref: https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-04
Closes #4864
2020-01-29 16:01:23 +01:00
..
vauth copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
vquic misc: Copyright year out of date, should be 2020 2020-01-12 16:55:50 +01:00
vssh wolfssh: make it init properly via Curl_ssh_init() 2020-01-24 10:27:31 +01:00
vtls openssl: make CURLINFO_CERTINFO not truncate x509v3 fields 2020-01-23 09:25:52 +01:00
.gitattributes
.gitignore
CMakeLists.txt CMake: Add support for CMAKE_LTO option. 2020-01-13 23:14:49 +01:00
Makefile.Watcom openssl: Remove SSLEAY leftovers 2018-11-17 21:36:10 +01:00
Makefile.am vssh: create directory for SSH backend code 2019-08-17 16:57:55 +02:00
Makefile.inc polarssl: removed 2020-01-16 11:55:56 +01:00
Makefile.m32 define: remove HAVE_ENGINE_LOAD_BUILTIN_ENGINES, not used anymore 2019-12-17 07:58:46 +01:00
Makefile.netware build: Remove unused HAVE_LIBSSL and HAVE_LIBCRYPTO defines 2019-10-05 19:18:30 -04:00
Makefile.vxworks
altsvc.c altsvc: make the save function ignore NULL filenames 2019-12-12 14:10:09 +01:00
altsvc.h alt-svc: add protocol version selection masking 2019-08-08 09:10:29 +02:00
amigaos.c configure: add --with-amissl 2019-03-15 10:22:42 +01:00
amigaos.h configure: add --with-amissl 2019-03-15 10:22:42 +01:00
arpa_telnet.h travis: add build for "configure --disable-verbose" 2018-10-18 14:51:49 +02:00
asyn-ares.c global_init: move the IPv6 works status bool to multi handle 2020-01-28 08:03:22 +01:00
asyn-thread.c global_init: move the IPv6 works status bool to multi handle 2020-01-28 08:03:22 +01:00
asyn.h cleanup: remove the 'numsocks' argument used in many places 2019-07-30 23:16:44 +02:00
base64.c base64: check for SSH, not specific SSH backends 2019-08-17 16:57:56 +02:00
checksrc.pl Revert "checksrc: fix regexp for ASSIGNWITHINCONDITION" 2019-12-16 22:46:35 +01:00
config-amigaos.h copyrights: update all copyright notices to 2019 on files changed this year 2019-11-02 23:15:56 +01:00
config-dos.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
config-mac.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
config-os400.h build: Remove unused HAVE_LIBSSL and HAVE_LIBCRYPTO defines 2019-10-05 19:18:30 -04:00
config-plan9.h define: remove HAVE_ENGINE_LOAD_BUILTIN_ENGINES, not used anymore 2019-12-17 07:58:46 +01:00
config-riscos.h copyrights: update all copyright notices to 2019 on files changed this year 2019-11-02 23:15:56 +01:00
config-symbian.h define: remove HAVE_ENGINE_LOAD_BUILTIN_ENGINES, not used anymore 2019-12-17 07:58:46 +01:00
config-tpf.h define: remove HAVE_ENGINE_LOAD_BUILTIN_ENGINES, not used anymore 2019-12-17 07:58:46 +01:00
config-vxworks.h define: remove HAVE_ENGINE_LOAD_BUILTIN_ENGINES, not used anymore 2019-12-17 07:58:46 +01:00
config-win32.h config-win32: cpu-machine-OS for Windows on ARM 2019-11-14 23:27:06 +01:00
config-win32ce.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
conncache.c conncache: removed unused Curl_conncache_bundle_size() 2020-01-24 10:29:06 +01:00
conncache.h conncache: removed unused Curl_conncache_bundle_size() 2020-01-24 10:29:06 +01:00
connect.c lib: fix compiler warnings with `CURL_DISABLE_VERBOSE_STRINGS` 2020-01-03 17:02:30 +01:00
connect.h Curl_addr2string: take an addrlen argument too 2019-08-31 11:41:56 +02:00
content_encoding.c content_encoding: accept up to 4 unknown trailer bytes after raw deflate data 2018-07-12 22:46:15 +02:00
content_encoding.h
cookie.c cookie: check __Secure- and __Host- case sensitively 2020-01-29 16:01:23 +01:00
cookie.h cookies: change argument type for Curl_flush_cookies 2019-10-03 22:56:28 +02:00
curl_addrinfo.c memdebug: log pointer before freeing its data 2019-03-12 21:45:03 +01:00
curl_addrinfo.h memdebug: make debug-specific functions use curl_dbg_ prefix 2019-03-08 23:21:21 +01:00
curl_base64.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_config.h.cmake cmake: Enable SMB for Windows builds 2020-01-11 18:10:47 -05:00
curl_ctype.c
curl_ctype.h
curl_des.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_des.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_endian.c lib: fix warnings found when porting to NuttX 2019-12-27 22:52:31 -05:00
curl_endian.h headers: Remove no longer exported functions 2019-07-10 19:26:40 +02:00
curl_fnmatch.c cleanup: remove FIXME and TODO comments 2019-05-16 09:16:56 +02:00
curl_fnmatch.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_get_line.c altsvc: Fix building with cookies disables 2019-04-20 22:46:21 +02:00
curl_get_line.h altsvc: Fix building with cookies disables 2019-04-20 22:46:21 +02:00
curl_gethostname.c
curl_gethostname.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_gssapi.c snprintf: renamed and we now only use msnprintf() 2018-11-23 08:26:51 +01:00
curl_gssapi.h gssapi: fix deprecated header warnings 2019-02-14 08:38:43 +01:00
curl_hmac.h
curl_ldap.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_md4.h md4: Use our own MD4 implementation when no crypto libraries are available 2019-08-04 18:01:29 +01:00
curl_md5.h md5: Update the function signature following d84da52d 2019-04-16 00:08:42 +01:00
curl_memory.h cleanup: remove FIXME and TODO comments 2019-05-16 09:16:56 +02:00
curl_memrchr.c
curl_memrchr.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_multibyte.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_multibyte.h lib: remove ASSIGNWITHINCONDITION exceptions, use our code style 2019-12-17 07:36:11 +01:00
curl_ntlm_core.c md4: Use our own MD4 implementation when no crypto libraries are available 2019-08-04 18:01:29 +01:00
curl_ntlm_core.h ntlm: USE_WIN32_CRYPTO check removed to get USE_NTLM2SESSION set 2019-11-07 23:14:02 +01:00
curl_ntlm_wb.c ntlm_wb: fix double-free in OOM 2019-12-13 13:01:01 +01:00
curl_ntlm_wb.h http_ntlm_wb: Move the type-2 message processing into a dedicated function 2019-05-16 00:03:30 +01:00
curl_path.c scp: fix directory name length used in memcpy 2019-08-24 18:47:56 +02:00
curl_path.h headers: end all headers with guard comment 2018-10-23 10:02:24 +02:00
curl_printf.h snprintf: renamed and we now only use msnprintf() 2018-11-23 08:26:51 +01:00
curl_range.c
curl_range.h
curl_rtmp.c urldata: avoid 'generic', use dedicated pointers 2019-09-03 23:00:51 +02:00
curl_rtmp.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_sasl.c copyright: fix year ranges 2020-01-21 10:34:44 +01:00
curl_sasl.h
curl_sec.h
curl_setup.h curl_setup: fix `CURLRES_IPV6` condition 2019-12-05 20:17:47 +01:00
curl_setup_once.h lib: fix warnings found when porting to NuttX 2019-12-27 22:52:31 -05:00
curl_sha256.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_sspi.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_sspi.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_threads.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curl_threads.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
curlx.h snprintf: renamed and we now only use msnprintf() 2018-11-23 08:26:51 +01:00
dict.c urldata: simplify bytecounters 2019-03-01 17:30:34 +01:00
dict.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
doh.c doh: make it behave when built without proxy support 2019-12-12 09:26:08 +01:00
doh.h doh: improced both encoding and decoding 2019-11-16 16:15:03 +01:00
dotdot.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
dotdot.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
easy.c global_init: move the IPv6 works status bool to multi handle 2020-01-28 08:03:22 +01:00
easyif.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
escape.c snprintf: renamed and we now only use msnprintf() 2018-11-23 08:26:51 +01:00
escape.h whitespace fixes 2018-09-23 22:24:02 +00:00
file.c file: fix copyright year range 2020-01-06 10:12:02 +01:00
file.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
fileinfo.c wildcard: disable from build when FTP isn't present 2019-05-13 08:17:09 +02:00
fileinfo.h
firefox-db2pem.sh whitespace fixes 2018-09-23 22:24:02 +00:00
formdata.c mime: acknowledge CURL_DISABLE_MIME 2019-05-13 08:17:09 +02:00
formdata.h mime: acknowledge CURL_DISABLE_MIME 2019-05-13 08:17:09 +02:00
ftp.c parsedate: offer a getdate_capped() alternative 2019-11-29 11:01:24 +01:00
ftp.h FTP: url-decode path before evaluation 2019-09-27 08:29:54 +02:00
ftplistparser.c copyrights: update all copyright notices to 2019 on files changed this year 2019-11-02 23:15:56 +01:00
ftplistparser.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
getenv.c getenv: support up to 4K environment variable contents on windows 2019-07-31 08:20:59 +02:00
getinfo.c CURLINFO_RETRY_AFTER: parse the Retry-After header value 2019-08-07 14:45:39 +02:00
getinfo.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
gopher.c gopher: remove check for path == NULL 2019-03-05 08:01:50 +01:00
gopher.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
hash.c
hash.h multi: fix the transfer hashes in the socket hash entries 2019-06-12 12:31:23 +02:00
hmac.c
hostasyn.c dns: release sharelock as soon as possible 2019-02-11 13:34:11 +01:00
hostcheck.c copyrights: update all copyright notices to 2019 on files changed this year 2019-11-02 23:15:56 +01:00
hostcheck.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
hostip.c fix: Copyright year out of date, should be 2020 2020-01-10 22:39:04 +01:00
hostip.h global_init: move the IPv6 works status bool to multi handle 2020-01-28 08:03:22 +01:00
hostip4.c fix: Copyright year out of date, should be 2020 2020-01-10 22:39:04 +01:00
hostip6.c global_init: move the IPv6 works status bool to multi handle 2020-01-28 08:03:22 +01:00
hostsyn.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
http.c http: move "oauth_bearer" from connectdata to Curl_easy 2020-01-21 10:32:43 +01:00
http.h http.h: Copyright year out of date, should be 2020 2020-01-20 08:37:40 +01:00
http2.c ConnectionExists: respect the max_concurrent_streams limits 2020-01-13 15:44:58 +01:00
http2.h conncache: fix multi-thread use of shared connection cache 2019-12-09 15:30:09 +01:00
http_chunks.c chunked-encoding: stop hiding the CURLE_BAD_CONTENT_ENCODING error 2019-10-02 07:46:05 +02:00
http_chunks.h chunked-encoding: stop hiding the CURLE_BAD_CONTENT_ENCODING error 2019-10-02 07:46:05 +02:00
http_digest.c auth: Rename the various authentication clean up functions 2019-05-12 18:37:00 +01:00
http_digest.h auth: Rename the various authentication clean up functions 2019-05-12 18:37:00 +01:00
http_negotiate.c vauth: return CURLE_AUTH_ERROR on gss_init_sec_context() failure 2019-08-26 13:43:21 +02:00
http_negotiate.h auth: Rename the various authentication clean up functions 2019-05-12 18:37:00 +01:00
http_ntlm.c http_ntlm: Remove duplicate NSS initialisation 2019-11-28 14:41:55 +01:00
http_ntlm.h auth: Rename the various authentication clean up functions 2019-05-12 18:37:00 +01:00
http_proxy.c conn: always set bits.close with connclose() 2019-12-09 17:17:42 +01:00
http_proxy.h
idn_win32.c
if2ip.c CURLOPT_ADDRESS_SCOPE: fix range check and more 2019-04-13 11:18:55 +02:00
if2ip.h CURLOPT_ADDRESS_SCOPE: fix range check and more 2019-04-13 11:18:55 +02:00
imap.c imap: merged two case-branches performing the same action 2019-09-20 08:07:25 +02:00
imap.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
inet_ntop.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
inet_ntop.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
inet_pton.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
inet_pton.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
krb5.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
ldap.c build: Disable Visual Studio warning "conditional expression is constant" 2019-12-01 19:01:02 -05:00
libcurl.plist
libcurl.rc (lib)curl.rc: fixup for minor bugs 2018-12-10 00:10:04 +01:00
libcurl.vers.in
llist.c llist: removed unused Curl_llist_move() 2020-01-24 10:29:18 +01:00
llist.h llist: removed unused Curl_llist_move() 2020-01-24 10:29:18 +01:00
makefile.amiga whitespace fixes 2018-09-23 22:24:02 +00:00
makefile.dj whitespace fixes 2018-09-23 22:24:02 +00:00
md4.c misc: Copyright year out of date, should be 2020 2020-01-12 16:55:50 +01:00
md5.c lib: reduce variable scopes 2019-05-20 08:51:11 +02:00
memdebug.c lib: reduce variable scopes 2019-05-20 08:51:11 +02:00
memdebug.h build: Disable Visual Studio warning "conditional expression is constant" 2019-12-01 19:01:02 -05:00
mime.c mime: make Curl_mime_duppart() assert if called without valid dst 2019-09-20 08:07:31 +02:00
mime.h mime: when disabled, avoid C99 macro 2019-09-18 08:08:41 +02:00
mk-ca-bundle.pl mk-ca-bundle: add support for CKA_NSS_SERVER_DISTRUST_AFTER 2020-01-22 10:41:31 +01:00
mk-ca-bundle.vbs
mprintf.c build: Disable Visual Studio warning "conditional expression is constant" 2019-12-01 19:01:02 -05:00
multi.c multi_done: if multiplexed, make conn->data point to another transfer 2020-01-28 13:00:41 +01:00
multihandle.h global_init: move the IPv6 works status bool to multi handle 2020-01-28 08:03:22 +01:00
multiif.h ConnectionExists: respect the max_concurrent_streams limits 2020-01-13 15:44:58 +01:00
netrc.c netrc: part of conditional expression is always true: !done 2019-09-20 08:07:18 +02:00
netrc.h netrc: CURL_DISABLE_NETRC 2019-05-17 23:24:34 +02:00
non-ascii.c copyrights: update all copyright notices to 2019 on files changed this year 2019-11-02 23:15:56 +01:00
non-ascii.h
nonblock.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
nonblock.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
nwlib.c memory: ensure to check allocation results 2018-10-03 23:45:38 +02:00
nwos.c
openldap.c urldata: avoid 'generic', use dedicated pointers 2019-09-03 23:00:51 +02:00
parsedate.c parsedate: offer a getdate_capped() alternative 2019-11-29 11:01:24 +01:00
parsedate.h parsedate: offer a getdate_capped() alternative 2019-11-29 11:01:24 +01:00
pingpong.c timediff: make it 64 bit (if possible) even with 32 bit time_t 2019-08-01 07:43:24 +02:00
pingpong.h cleanup: remove the 'numsocks' argument used in many places 2019-07-30 23:16:44 +02:00
pop3.c cleanup: remove the 'numsocks' argument used in many places 2019-07-30 23:16:44 +02:00
pop3.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
progress.c XFERINFOFUNCTION: support CURL_PROGRESSFUNC_CONTINUE 2019-11-26 09:16:01 +01:00
progress.h whitespace fixes 2018-09-23 22:24:02 +00:00
psl.c
psl.h
quic.h ngtcp2: use overflow buffer for extra HTTP/3 data 2019-11-18 16:40:08 +01:00
rand.c PolarSSL: deprecate support step 1. Removed from configure. 2019-05-22 10:00:56 +02:00
rand.h PolarSSL: deprecate support step 1. Removed from configure. 2019-05-22 10:00:56 +02:00
rtsp.c cleanup: remove the 'numsocks' argument used in many places 2019-07-30 23:16:44 +02:00
rtsp.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
security.c security: silence conversion warning 2019-10-13 22:10:12 +02:00
select.c global_init: assume the EINTR bit by default 2020-01-26 18:27:18 +01:00
select.h global_init: assume the EINTR bit by default 2020-01-26 18:27:18 +01:00
sendf.c global_init: assume the EINTR bit by default 2020-01-26 18:27:18 +01:00
sendf.h travis: add build for "configure --disable-verbose" 2018-10-18 14:51:49 +02:00
setopt.c smtp: Allow RCPT TO command to fail for some recipients 2020-01-21 10:40:19 +01:00
setopt.h os400: make vsetopt() non-static as Curl_vsetopt() for os400 support. 2019-06-16 01:05:53 +02:00
setup-os400.h os400: getpeername() and getsockname() return ebcdic AF_UNIX sockaddr, 2019-09-24 13:39:22 +02:00
setup-vms.h
sha256.c build: Disable Visual Studio warning "conditional expression is constant" 2019-12-01 19:01:02 -05:00
share.c
share.h
sigpipe.h sigpipe: if mbedTLS is used, ignore SIGPIPE 2019-01-28 12:03:33 +01:00
slist.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
slist.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
smb.c smb: check for full size message before reading message details 2019-09-16 14:16:06 +02:00
smb.h smb: fix memory leak on early failure 2018-07-30 17:59:36 +02:00
smtp.c smtp: Allow RCPT TO command to fail for some recipients 2020-01-21 10:40:19 +01:00
smtp.h smtp: Allow RCPT TO command to fail for some recipients 2020-01-21 10:40:19 +01:00
sockaddr.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
socketpair.c lib: fix warnings found when porting to NuttX 2019-12-27 22:52:31 -05:00
socketpair.h socketpair: an implemention for Windows and more 2019-10-10 11:04:38 +02:00
socks.c socks: Fix destination host shown on SOCKS5 error 2019-09-21 23:45:02 -04:00
socks.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
socks_gssapi.c snprintf: renamed and we now only use msnprintf() 2018-11-23 08:26:51 +01:00
socks_sspi.c strerror: make the strerror function use local buffers 2019-02-26 10:20:21 +01:00
speedcheck.c
speedcheck.h
splay.c cleanup: remove FIXME and TODO comments 2019-05-16 09:16:56 +02:00
splay.h headers: Remove no longer exported functions 2019-07-10 19:26:40 +02:00
strcase.c strcase: turn Curl_raw_tolower into static 2020-01-24 10:29:06 +01:00
strcase.h strcase: turn Curl_raw_tolower into static 2020-01-24 10:29:06 +01:00
strdup.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
strdup.h
strerror.c ngtcp2: Add an error code for QUIC connection errors 2020-01-11 18:19:32 -05:00
strerror.h strerror: Add Curl_winapi_strerror for Win API specific errors 2019-12-01 18:12:36 -05:00
strtok.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
strtok.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
strtoofft.c copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
strtoofft.h
system_win32.c win32: make DLL loading a no-op for UWP 2019-06-25 20:33:07 +02:00
system_win32.h system_win32: fix clang warning 2019-07-11 02:27:04 -04:00
telnet.c build: Disable Visual Studio warning "conditional expression is constant" 2019-12-01 19:01:02 -05:00
telnet.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
tftp.c tftp: Alloc maximum blksize, and use default unless OACK is received 2019-09-09 08:14:34 +02:00
tftp.h copyrights: fix copyright year range 2019-11-08 14:51:42 +01:00
timeval.c timediff: make it 64 bit (if possible) even with 32 bit time_t 2019-08-01 07:43:24 +02:00
timeval.h timediff: make it 64 bit (if possible) even with 32 bit time_t 2019-08-01 07:43:24 +02:00
transfer.c build: Disable Visual Studio warning "conditional expression is constant" 2019-12-01 19:01:02 -05:00
transfer.h cleanup: remove the 'numsocks' argument used in many places 2019-07-30 23:16:44 +02:00
url.c multi_done: if multiplexed, make conn->data point to another transfer 2020-01-28 13:00:41 +01:00
url.h url: make Curl_close() NULLify the pointer too 2019-10-30 09:36:21 +01:00
urlapi-int.h headers: Remove no longer exported functions 2019-07-10 19:26:40 +02:00
urlapi.c urlapi: guess scheme correct even with credentials given 2020-01-28 08:40:16 +01:00
urldata.h urldata: do string enums without #ifdefs for build scripts 2020-01-27 09:26:58 +01:00
version.c wolfSSH: new SSH backend 2020-01-12 17:19:12 +01:00
warnless.c cleanup: make local functions static 2019-02-10 18:38:57 +01:00
warnless.h cleanup: make local functions static 2019-02-10 18:38:57 +01:00
wildcard.c wildcard: disable from build when FTP isn't present 2019-05-13 08:17:09 +02:00
wildcard.h wildcard: disable from build when FTP isn't present 2019-05-13 08:17:09 +02:00
x509asn1.c wolfssl: refer to it as wolfSSL only 2019-06-10 09:18:16 +02:00
x509asn1.h wolfssl: refer to it as wolfSSL only 2019-06-10 09:18:16 +02:00