From: Igor Sysoev <igor@sysoev.ru>
Date: Mon, 29 Sep 2008 04:47:22 +0000 (+0000)
Subject: disable $realpath_root variable in a "root" directive
X-Git-Tag: release-0.7.18~8
X-Git-Url: http://www.kaiwu.me/postgresql/commit/static/gitweb.js?a=commitdiff_plain;h=4ca2acfce02d76260e8c7c3c7d9d6a7d9a0a3d88;p=nginx.git

disable $realpath_root variable in a "root" directive
---

diff --git a/src/http/ngx_http_core_module.c b/src/http/ngx_http_core_module.c
index ebd082f59..1d8a55222 100644
--- a/src/http/ngx_http_core_module.c
+++ b/src/http/ngx_http_core_module.c
@@ -3291,6 +3291,17 @@ ngx_http_core_root(ngx_conf_t *cf, ngx_command_t *cmd, void *conf)
         return NGX_CONF_ERROR;
     }
 
+    if (ngx_strstr(value[1].data, "$realpath_root")
+        || ngx_strstr(value[1].data, "${realpath_root}"))
+    {
+        ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
+                           "the $realpath_root variable may not be used "
+                           "in the \"%V\" directive",
+                           &cmd->name);
+
+        return NGX_CONF_ERROR;
+    }
+
     lcf->alias = alias;
     lcf->root = value[1];