Introduce --trust-server-names. Close CVE-2010-2252.

[wget] / src / ChangeLog

diff --git a/src/ChangeLog b/src/ChangeLog
index 5c8dea7ad3b90fd2d3634ad626ff9cbdc6d69630..60e82d944cf7a8a23d307552b25f1576698757de 100644 (file)
--- a/src/ChangeLog
+++ b/src/ChangeLog
@@ -1,3 +1,18 @@
+2010-07-28  Giuseppe Scrivano  <gscrivano@gnu.org>
+
+       * http.h (http_loop): Add new argument `original_url'
+       * http.c (http_loop): Add new argument `original_url'.  Use
+       `original_url' to get a filename if `trustservernames' is false.
+
+       * init.c (commands): Add "trustservernames".
+
+       * options.h (library): Add variable `trustservernames'.
+
+       * main.c (option_data): Add trust-server-names.
+       (print_help): Describe --trust-server-names.
+
+       * retr.c (retrieve_url): Pass new argument to `http_loop'.
+
 2010-07-20  Alan Jenkins <alan-jenkins@tuffmail.co.uk> (tiny change)
 
        * http.c (gethttp): Check content-length was set before trying to