diff options
| author | Igor Sysoev <igor@sysoev.ru> | 2009-09-25 09:30:06 +0000 |
|---|---|---|
| committer | Igor Sysoev <igor@sysoev.ru> | 2009-09-25 09:30:06 +0000 |
| commit | a552ab476e95cd034d2463b3de95239010a8e0b0 (patch) | |
| tree | 6bac5d4431e5bf59c800d9db195a76eb026869b1 /src/http/ngx_http_parse.c | |
| parent | 7f6d71bbc848360f4f6b1ec276736b88fb15b3f0 (diff) | |
| download | nginx-a552ab476e95cd034d2463b3de95239010a8e0b0.tar.gz nginx-a552ab476e95cd034d2463b3de95239010a8e0b0.zip | |
check unsafe Destination
Diffstat (limited to 'src/http/ngx_http_parse.c')
| -rw-r--r-- | src/http/ngx_http_parse.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/src/http/ngx_http_parse.c b/src/http/ngx_http_parse.c index d2abaa708..b638f86fc 100644 --- a/src/http/ngx_http_parse.c +++ b/src/http/ngx_http_parse.c @@ -1322,8 +1322,10 @@ ngx_http_parse_unsafe_uri(ngx_http_request_t *r, ngx_str_t *uri, unsafe: - ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, - "unsafe URI \"%V\" was detected", uri); + if (*flags & NGX_HTTP_LOG_UNSAFE) { + ngx_log_error(NGX_LOG_ERR, r->connection->log, 0, + "unsafe URI \"%V\" was detected", uri); + } return NGX_ERROR; } |