3 ms·
Serious question: what's the value of using this over https://uriparser.github.io/ https://uriparser.github.io/ ?
by EdSchouten 8y ago
Serious question: what's the value of using this over https://uriparser.github.io/ https://uriparser.github.io/ ?
- cobbzilla 8y agoPerhaps, if you're using a lot of curl and want to make sure your program parses URLs the same way curl does.
- rpdillon 8y agoIt will be consistent with the logic used by the codebase that actually fetches the URL (curl), so it won't leave gaps between the expected behavior and actual behavior the way two disjoint implementations would.
- deleted 8y ago[deleted]
- discreditable 8y agoFrom the article: > By offering applications access to libcurl's own URL parser, we hope to tighten a problematic vulnerable area for applications where the URL parser library would believe one thing and libcurl another. This could and has sometimes lead to security problems. (See for example Exploiting URL Parser in Trending Programming Languages! by Orange Tsai)
- wink 8y agoI'd say because tons of projects use curl anyway, whereas I for example have never heard of this uriparser.