p3k/http - http - Gitea

https://github.com/aaronpk/p3k-http

8 lines

221 B

Raw Normal View History

Add safe mode for fetching untrusted URLs set_safe_mode(true) refuses anything but http and https, refuses hosts that resolve to loopback, private, link-local or reserved addresses, pins curl to the addresses that were checked (no DNS rebinding), and follows redirects one hop at a time so each is checked, dropping credentials when a redirect changes origin. Hosts or ranges can be allowed explicitly for development servers. Off by default. Adds a PHPUnit suite. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 day ago

<?xml version="1.0" encoding="UTF-8"?>
<phpunit bootstrap="vendor/autoload.php" colors="true">
  <testsuites>
    <testsuite name="p3k-http">
      <directory>tests</directory>
    </testsuite>
  </testsuites>
</phpunit>