Strip credentials from HTTP Referer (#1891)

0edf390187/library/SimplePie/File.php (L109)
Candidate for pull-request upstream to SimplePie
This commit is contained in:
Alexandre Alapetite
2018-05-20 23:23:48 +02:00
committed by GitHub
parent 7e9a29b719
commit f17417e95c

View File

@@ -110,7 +110,7 @@ class SimplePie_File
curl_setopt($fp, CURLOPT_FAILONERROR, 1);
curl_setopt($fp, CURLOPT_TIMEOUT, $timeout);
curl_setopt($fp, CURLOPT_CONNECTTIMEOUT, $timeout);
curl_setopt($fp, CURLOPT_REFERER, $url);
curl_setopt($fp, CURLOPT_REFERER, SimplePie_Misc::url_remove_credentials($url));
curl_setopt($fp, CURLOPT_USERAGENT, $useragent);
curl_setopt($fp, CURLOPT_HTTPHEADER, $headers2);
if (!ini_get('open_basedir') && !ini_get('safe_mode') && version_compare(SimplePie_Misc::get_curl_version(), '7.15.2', '>='))