Problemunvalidated
url_skip_credentials() calls strpbrk(url, "@/?#;") and concludes 'no credentials' if the first stop character is anything other than '@' — GNU Wget through 1.24.5. Outcome: wget connects to one host while logs, security filters, and downstream tools see a different host.
3bf859b8-0818-4103-a7b5-e74122dc15d4
url_skip_credentials() calls strpbrk(url, "@/?#;") and concludes 'no credentials' if the first stop character is anything other than '@' — GNU Wget through 1.24.5. Outcome: wget connects to one host while logs, security filters, and downstream tools see a different host.