Timeline for Can a curl request to an arbitrary url made sufficiently safe?
Current License: CC BY-SA 3.0
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 18, 2016 at 10:03 | comment | added | Samuel | My bad, my scenario I modelled wouldn't execute curl via system call but use a php extension, so injecting anything else beside the url should be no issue. But thanks for the hint. The url you mentioned is of course opaque to the curl request but if it is not a private IP it should be a website like any other. It is not that the curl result is executed on server which would of course cause even more issues. | |
| Feb 18, 2016 at 2:44 | history | answered | h4ckNinja | CC BY-SA 3.0 |