data: URIs are fetched with curl #411
Description
I have a vCard containing:
BEGIN:VCARD
VERSION:4.0
PHOTO:data:image/jpeg;base64\,/9j/4AAQS...
The CardDAV plugin writes in /tmp/carddav_http.log:
[22-Dec-2022 08:47:00 +0000]: <20083dd6> [5 ERR] "GET image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBk>
>>>>>>>>
GET image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkSEw8UHRofHh0aHBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5PTgyP>
Host:
User-Agent: GuzzleHttp/7
Authorization: --- REDACTED BY MStilkerich\CardDavAddressbook4Roundcube\RoundcubeLogger ---
<<<<<<<<
--------
cURL error 3: (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAgG>
[22-Dec-2022 08:47:00 +0000]: <20083dd6> [5 ERR] "GET image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBk>
>>>>>>>>
GET image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkSEw8UHRofHh0aHBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5PTgyP>
Host:
User-Agent: GuzzleHttp/7
Authorization: --- REDACTED BY MStilkerich\CardDavAddressbook4Roundcube\RoundcubeLogger ---
<<<<<<<<
--------
cURL error 3: (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAgG>
data: URIs shall not be fetched over CURL.