]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 05395f4) | patch
Disabled control characters in URIs.
authorMaxim Dounin <mdounin@mdounin.ru>
Mon, 28 Jun 2021 15:01:15 +0000 (18:01 +0300)
committerMaxim Dounin <mdounin@mdounin.ru>
Mon, 28 Jun 2021 15:01:15 +0000 (18:01 +0300)
commit0b66bd4be777a5b79c5ae0e7dff89fc6429da0fe
tree803480ff45b075b82aadc1dbaff377d5f7397ea2tree | snapshot
parent05395f4889cf0b66e8d049921ad19f1a08319150commit | diff
Disabled control characters in URIs.

Control characters (0x00-0x1f, 0x7f) were never allowed in URIs, and must
be percent-encoded by clients.  Further, these are not believed to appear
in practice.  On the other hand, passing such characters might make various
attacks possible or easier, despite the fact that currently allowed control
characters are not significant for HTTP request parsing.
src/http/ngx_http_parse.c diff | blob | history
nginx upstream