From 6d6d81e393b790fda5792cbd6aa9c7af82669226 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Sat, 4 Apr 2026 13:11:20 +0200 Subject: [PATCH] url: set default upload flags to CURLULFLAG_SEEN As documented. Not doing this was a regression. Follow-up to 6758aa722ddf5a6db819b753d96 Reported by Codex Security Closes #21217 --- lib/url.c | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/url.c b/lib/url.c index c61c89c39d..d5078c4bf4 100644 --- a/lib/url.c +++ b/lib/url.c @@ -426,6 +426,7 @@ void Curl_init_userdefined(struct Curl_easy *data) set->sep_headers = TRUE; /* separated header lists by default */ set->buffer_size = READBUFFER_SIZE; set->upload_buffer_size = UPLOADBUFFER_DEFAULT; + set->upload_flags = CURLULFLAG_SEEN; set->happy_eyeballs_timeout = CURL_HET_DEFAULT; set->upkeep_interval_ms = CURL_UPKEEP_INTERVAL_DEFAULT; set->maxconnects = DEFAULT_CONNCACHE_SIZE; /* for easy handles */