On Sun, 14 Dec 2025, Jeffrey Walton wrote:
A url of http://www.example.com/image/../image.jpeg should result in an
invalid path at the server and return an error to the client since there is
no image/ subdirectory at document root.
Your opinion on this does not seem backed by the specifications.
curl has removed dotdot sequences by default for the last dozen years and
people are not having a problem with it.
curl also allows users to skip it.
--
/ daniel.haxx.se || https://rock-solid.curl.dev
--
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette: https://curl.se/mail/etiquette.html
