CRLF Injection in Gopher Protocol (`lib/gopher.c`)
该报告还没有中文解读。
原文摘录
摘自原文（2774 字符中的一小部分）
Control characters slip through during URL handling in curl’s Gopher setup. Though null bytes get blocked by the `REJECT_ZERO` setting, returns and line feeds remain permitted. A specially built address using percent-encoded breaks - like %0D%0A - opens room for command insertion. Because of how …
原文中的代码
result = Curl_urldecode(newp, 0, &buf_alloc, &buf_len, REJECT_ZERO);
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 curl 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @gaurav0212 · 版权归作者与 curl 所有