diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2021-06-28 18:01:15 +0300 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2021-06-28 18:01:15 +0300 |
| commit | 0b66bd4be777a5b79c5ae0e7dff89fc6429da0fe (patch) | |
| tree | 803480ff45b075b82aadc1dbaff377d5f7397ea2 /src/http/modules/ngx_http_uwsgi_module.c | |
| parent | 05395f4889cf0b66e8d049921ad19f1a08319150 (diff) | |
| download | nginx-0b66bd4be777a5b79c5ae0e7dff89fc6429da0fe.tar.gz nginx-0b66bd4be777a5b79c5ae0e7dff89fc6429da0fe.zip | |
Disabled control characters in URIs.
Control characters (0x00-0x1f, 0x7f) were never allowed in URIs, and must
be percent-encoded by clients. Further, these are not believed to appear
in practice. On the other hand, passing such characters might make various
attacks possible or easier, despite the fact that currently allowed control
characters are not significant for HTTP request parsing.
Diffstat (limited to 'src/http/modules/ngx_http_uwsgi_module.c')
0 files changed, 0 insertions, 0 deletions