CURLOPT_UNRESTRICTED_AUTH Dangerous Default Documentation Gap
该报告还没有中文解读。
原文摘录
摘自原文（2257 字符中的一小部分）
Summary: CURLOPT_UNRESTRICTED_AUTH=1 instructs libcurl to send credentials to ALL hosts during redirect chains, 'possibly again and again as the following hosts can keep redirecting to new hosts.' The documentation explicitly warns this is dangerous, but the default behavior is also risky: curl …
原文中的代码
--- ### Step 3 — Watch the output You'll see two servers start — an **origin** and an **attacker**. curl sends your headers to the origin, which redirects to the attacker. Look for this section:
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 curl 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @sabari_n · 版权归作者与 curl 所有