TYPO3 Core

Since PHP 5.2.0, 5.1.5 and 4.4.4 (see PHP Changelog).

If you are trying to use CURLOPT_FOLLOWLOCATION and you get this warning:
Warning: curl_setopt() [function.curl-setopt]: CURLOPT_FOLLOWLOCATION cannot be activated when in safe_mode or an open_basedir is set...

then you will want to read http://www.php.net/ChangeLog-4.php which says "Disabled CURLOPT_FOLLOWLOCATION in curl when open_basedir or safe_mode are enabled." as of PHP 4.4.4/5.1.5. This is due to the fact that curl is not part of PHP and doesn't know the values of open_basedir or safe_mode, so you could comprimise your webserver operating in safe_mode by redirecting (using header('Location: ...')) to "file://" urls, which curl would have gladly retrieved.

@Martin: There already is a bugfix since more than a month which hasn't be added to the repository. Is there any doubt in applying it?

Björn, there is some concern that simply ignoring the failure is not a good option.

any news on that?

Nothing besides the tiny thread on the core mailing list. 18-10-2007

This issue is still being encountered in version 4.1.3 even though duplicate issue 0004292 has been marked as 'resolved'. Someone please patch the main trunk.

FYI: 4292 is resolved as duplicate, not as being fixed!

Any solution for this yet?

Fixed in SVN for trunk. Has been fixed in 4.1.x for a while.