If there's anyone using my Requests for PHP library [0], just an FYI that it is not vulnerable to this as it handles redirection outside of cURL and double-chec

If there's anyone using my Requests for PHP library [0], just an FYI that it is not vulnerable to this as it handles redirection outside of cURL and double-checks all URLs. That said, I'll be pushing some commits momentarily to ensure that this is also forced via CURLOPT_PROTOCOLS inside the cURL transport. [0]: http://requests.ryanmccue.info/ http://requests.ryanmccue.info/