summaryrefslogtreecommitdiffstats
path: root/lib/private/httphelper.php
Commit message (Collapse)AuthorAgeFilesLines
* Do only follow HTTP and HTTPS redirectsLukas Reschke2014-09-221-0/+177
We do not want to follow redirects to other protocols since they might allow an adversary to bypass network restrictions. (i.e. a redirect to ftp:// might be used to access files of a FTP server which might be in a secure zone and not be reachable from the net but from the ownCloud server) Get final redirect manually using get_headers() Migrate to HTTPHelper class and add unit tests