Alhuda Khan 9494750986 ftp: reject control bytes in ACCT and alternative-to-user ... A CR or LF in the CURLOPT_FTP_ACCOUNT or CURLOPT_FTP_ALTERNATIVE_TO_USER string split the control-channel command line and smuggled a second FTP command. Reject a byte below 0x20 in both values before the command is built. Closes #22301		2026-07-13 08:46:45 +02:00
..
curlx	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
vauth
vquic	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
vssh	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
vtls	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
.gitignore
altsvc.c	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
altsvc.h
amigaos.c
amigaos.h
arpa_telnet.h
asyn-ares.c
asyn-base.c
asyn-thrdd.c	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
asyn.h	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
bufq.c
bufq.h
bufref.c
bufref.h
cf-dns.c	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
cf-dns.h
cf-h1-proxy.c
cf-h1-proxy.h
cf-h2-proxy.c
cf-h2-proxy.h
cf-haproxy.c
cf-haproxy.h
cf-https-connect.c
cf-https-connect.h
cf-ip-happy.c
cf-ip-happy.h
cf-recvbuf.c
cf-recvbuf.h
cf-setup.c
cf-setup.h
cf-socket.c
cf-socket.h
cfilters.c
cfilters.h
CMakeLists.txt
config-mac.h
config-os400.h
config-riscos.h
config-win32.h
conncache.c	conncache: apply multi limits to transfers using a shared pool	2026-07-12 15:08:31 -04:00
conncache.h
connect.c
connect.h
content_encoding.c	ws: pause/unpause write handling	2026-07-12 18:06:21 +02:00
content_encoding.h
cookie.c
cookie.h
creds.c
creds.h
cshutdn.c
cshutdn.h
curl_addrinfo.c
curl_addrinfo.h
curl_config-cmake.h.in
curl_ctype.h
curl_endian.c
curl_endian.h
curl_fnmatch.c
curl_fnmatch.h
curl_fopen.c
curl_fopen.h
curl_get_line.c
curl_get_line.h
curl_gethostname.c
curl_gethostname.h
curl_gssapi.c
curl_gssapi.h
curl_hmac.h
curl_ldap.h
curl_md4.h
curl_md5.h
curl_memrchr.c
curl_memrchr.h
curl_ntlm_core.c
curl_ntlm_core.h
curl_printf.h
curl_range.c
curl_range.h
curl_sasl.c
curl_sasl.h
curl_setup.h
curl_sha256.h
curl_sha512_256.c	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
curl_sha512_256.h
curl_share.c
curl_share.h
curl_sspi.c
curl_sspi.h
curl_threads.c
curl_threads.h
curl_trc.c	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
curl_trc.h
cw-out.c	ws: pause/unpause write handling	2026-07-12 18:06:21 +02:00
cw-out.h
cw-pause.c	ws: pause/unpause write handling	2026-07-12 18:06:21 +02:00
cw-pause.h	ws: pause/unpause write handling	2026-07-12 18:06:21 +02:00
dict.c
dict.h
dllmain.c
dnscache.c
dnscache.h
doh.c
doh.h
dynhds.c
dynhds.h
easy.c
easy_lock.h
easygetopt.c
easyif.h
easyoptions.c
easyoptions.h
escape.c
escape.h
fake_addrinfo.c
fake_addrinfo.h
file.c
file.h
fileinfo.c
fileinfo.h
formdata.c
formdata.h
ftp-int.h
ftp.c	ftp: reject control bytes in ACCT and alternative-to-user	2026-07-13 08:46:45 +02:00
ftp.h
ftplistparser.c
ftplistparser.h
functypes.h
getenv.c
getinfo.c
getinfo.h
gopher.c
gopher.h
hash.c
hash.h
headers.c	ws: pause/unpause write handling	2026-07-12 18:06:21 +02:00
headers.h
hmac.c
hostip.c
hostip.h
hostip4.c	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
hostip6.c
hsts.c
hsts.h
http.c	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
http.h
http1.c
http1.h
http2.c
http2.h
http_aws_sigv4.c
http_aws_sigv4.h
http_chunks.c	ws: pause/unpause write handling	2026-07-12 18:06:21 +02:00
http_chunks.h
http_digest.c
http_digest.h
http_negotiate.c
http_negotiate.h
http_ntlm.c
http_ntlm.h
http_proxy.c
http_proxy.h
httpsrr.c
httpsrr.h
idn.c
idn.h
if2ip.c
if2ip.h
imap.c
imap.h
ldap.c
libcurl.def
libcurl.rc
libcurl.vers.in
llist.c
llist.h
macos.c
macos.h
Makefile.am
Makefile.inc
Makefile.soname
md4.c
md5.c
memdebug.c
mime.c	mime: reject CR and LF in mail part name and filename	2026-07-13 08:29:22 +02:00
mime.h
mprintf.c
mqtt.c
mqtt.h
multi.c
multi_ev.c
multi_ev.h
multi_ntfy.c
multi_ntfy.h
multihandle.h
multiif.h
netrc.c
netrc.h
openldap.c
optiontable.pl
parsedate.c
parsedate.h
peer.c
peer.h	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
pingpong.c
pingpong.h
pop3.c
pop3.h
progress.c
progress.h
protocol.c
protocol.h
proxy.c
proxy.h
psl.c
psl.h
rand.c
rand.h
ratelimit.c
ratelimit.h
request.c
request.h
rtsp.c
rtsp.h
select.c
select.h
sendf.c	ws: pause/unpause write handling	2026-07-12 18:06:21 +02:00
sendf.h	ws: pause/unpause write handling	2026-07-12 18:06:21 +02:00
setopt.c	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
setopt.h
setup-os400.h
setup-vms.h
setup-win32.h
sha256.c
sigpipe.h
slist.c
slist.h
smb.c
smb.h
smtp.c
smtp.h
sockaddr.h
socketpair.c
socketpair.h
socks.c	tidy-up: typos, comment nits	2026-07-11 13:55:45 +02:00
socks.h
socks_gssapi.c
socks_sspi.c
splay.c
splay.h
strcase.c
strcase.h
strequal.c
strerror.c
strerror.h
system_win32.c
system_win32.h
telnet.c
telnet.h
tftp.c
tftp.h
thrdpool.c
thrdpool.h
thrdqueue.c
thrdqueue.h
transfer.c
transfer.h
uint-bset.c
uint-bset.h
uint-hash.c
uint-hash.h
uint-spbset.c
uint-spbset.h
uint-table.c
uint-table.h
url.c	url: reject control codes in credentials set via CURLOPT	2026-07-04 12:28:29 +02:00
url.h
urlapi-int.h
urlapi.c
urldata.h
version.c
ws.c	ws: pause/unpause write handling	2026-07-12 18:06:21 +02:00
ws.h