search

zendesk / zendesk_api_client_php

Official Zendesk API v2 client library for PHP
336 stars 259 forks source link

Add CURLOPT_PROTOCOLS = CURLPROTO_HTTP | CURLPROTO_HTTPS #365

Closed oligriffiths closed 6 years ago

oligriffiths commented 6 years ago

Without this option set, this is a security vulnerability where the remote server can respond with a non-http protocol such as FTP for example, and curl will happily just follow the redirect. This needs applying to the V2 track also.

oligriffiths commented 6 years ago

Thanks for merging this. Can we get a new tag for this? Thanks