curl: 50: CMake `HTTP_ONLY` does not disable SSH backends — SCP and SFTP remain usable

Summary The CMake HTTPONLY=ON option is documented as "Disable all protocols except HTTP" CMakeLists.txt:538, but the implementation CMakeLists.txt:541-557 only sets CURLDISABLE flags for non-SSH protocols. It does not disable CURLUSELIBSSH2 or CURLUSELIBSSH. Since CURLUSELIBSSH2 defaults to ON, ...

Facebook Parse - Secure & HTTP_only Bypass Vulnerability

Document Title: =============== Facebook Parse - Secure & HTTPonly Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1429 View Video: https://www.youtube.com/watch?v=1yUw7rtTTeI Release Date: ============= 2015-03-13 Vulnerability Laboratory ID VL-ID:...

Facebook Parse - Secure & HTTP_only Bypass Vulnerability

Document Title: =============== Facebook Parse - Secure & HTTPonly Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1429 View Video: https://www.youtube.com/watch?v=1yUw7rtTTeI Release Date: ============= 2015-03-13 Vulnerability Laboratory ID VL-ID:...