Re: security and some of my ramblings

[Hrvoje Niksic]

"Dan Harkless" <[EMAIL PROTECTED]> writes:

> By the way, Hrvoje, it wasn't clear to me on brief inspection why we
> sometimes don't hide the password (depending on the `hide'
> parameter).  Could this be commented better?

Because str_url() is not meant only for printing URLs.  It's also for
"canonicalizing" them, i.e. ftp.gnu.org:/pub/wget/ ->
ftp://ftp.gnu.org/pub/wget/, etc.

The password-printing problem is not solved yet.  http.c can still
print password in non-verbose mode.