geckon01/php-curl-class
1
0
Fork 0
mirror of https://github.com/php-curl-class/php-curl-class.git synced 2026-09-14 12:26:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

Clean up

Browse Source
This commit is contained in:
Zach Borboa
2016-10-13 00:10:05 -07:00
parent efe1bcc944
commit 1d7af4465f
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
SECURITY.md
+2 -2
View File
@@ -40,7 +40,7 @@ if (!is_website_url($url)) {
### Request data may refer to system files
* Request data prefixed with the @ character may have special interpretation and read from system files.
* Request data prefixed with the `@` character may have special interpretation and read from system files.
```bash
# Attacker.
@@ -63,7 +63,7 @@ $curl->post('http://www.anotherwebsite.com/', array(
```php
$curl = new Curl();
$curl->setOpt(CURLOPT_FOLLOWLOCATION, true); // DANGER!
$curl->download('http://www.example.com/image.png', 'my_image.png');
$curl->download('https://www.example.com/image.png', 'my_image.png');
```
### Keep SSL protections enabled.