projects / integration.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6527cbc) | patch
MDL-72203 curl: Check each URL in redirect chain to see if it is blocked cbf9dfbd8dcfc60a6e677b475affb38598beec31
authorDavid Mudrák <david@moodle.com>
Thu, 22 Jul 2021 21:28:23 +0000 (23:28 +0200)
committerMichael Hawkins <michaelh@moodle.com>
Tue, 27 Jul 2021 14:56:48 +0000 (22:56 +0800)
commitcbf9dfbd8dcfc60a6e677b475affb38598beec31
tree902c9316547c1b784f8762d984e5d085794f189btree | snapshot
parent6527cbc49262a014b1db9f753d39b00d1c056944commit | diff
MDL-72203 curl: Check each URL in redirect chain to see if it is blocked

The security problem here was that only the first and the last URL in
the redirect chain was checked by the security helper. This patch forces
the curl wrapper to always emulate cURL redirects and check every
redirect URL in the chain before actually visiting it.
lib/filelib.php diff | blob | blame | history
Moodle integration repository