diff options
| author | Igor Sysoev <igor@sysoev.ru> | 2007-07-13 09:37:01 +0000 |
|---|---|---|
| committer | Igor Sysoev <igor@sysoev.ru> | 2007-07-13 09:37:01 +0000 |
| commit | 8662b6bec54b138572c50d3e1fb738790ef3eb5c (patch) | |
| tree | 0be163a1e256635ddf278e75b79787e5faf84357 /src/core/ngx_string.h | |
| parent | 049ae00031cecba74e8b5d2218eb28c125e99881 (diff) | |
| download | nginx-8662b6bec54b138572c50d3e1fb738790ef3eb5c.tar.gz nginx-8662b6bec54b138572c50d3e1fb738790ef3eb5c.zip | |
msie_refresh should escape at least '"' to prevent XSS
Diffstat (limited to 'src/core/ngx_string.h')
| -rw-r--r-- | src/core/ngx_string.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/core/ngx_string.h b/src/core/ngx_string.h index 18306d2d2..6b432d1f2 100644 --- a/src/core/ngx_string.h +++ b/src/core/ngx_string.h @@ -142,6 +142,7 @@ u_char *ngx_utf_cpystrn(u_char *dst, u_char *src, size_t n); #define NGX_ESCAPE_URI 0 #define NGX_ESCAPE_ARGS 1 #define NGX_ESCAPE_HTML 2 +#define NGX_ESCAPE_REFRESH 3 #define NGX_UNESCAPE_URI 1 |