·
27 commits
to 8.2
since this release
Immutable
release. Only release title and notes can be modified.
Changelog (v8.1.5...v8.1.6)
- bug #65751 Reject decompression bombs (@nicolas-grekas)
- bug #65740 Reject https:// proxies that curl would connect to in cleartext (@nicolas-grekas)
- bug #65731 Don't send the original Host header on cross-authority redirects (@nicolas-grekas)
- bug #65742 Reject 3xx pushed responses (@nicolas-grekas)
- bug #65704 Drop credentials when a redirect changes the scheme (@nicolas-grekas)
- bug #65632 Fix GuzzleHttpHandler consuming responses out of band (@peter17)
Contributors
nicolas-grekas and peter17