diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2025-11-04 16:34:32 +0400 |
|---|---|---|
| committer | Roman Arutyunyan <arutyunyan.roman@gmail.com> | 2025-11-26 19:51:40 +0400 |
| commit | 511abb19e1e1b127f6d0943ccac346211a490a35 (patch) | |
| tree | 0f48e61ffb621c0791ad67e2e8888441f21b64bd /src/http/modules | |
| parent | 6ed1188411882086e3518eda779ab782d8ab4d3f (diff) | |
| download | nginx-511abb19e1e1b127f6d0943ccac346211a490a35.tar.gz nginx-511abb19e1e1b127f6d0943ccac346211a490a35.tar.bz2 | |
Improved host header validation.
Validation is rewritten to follow RFC 3986 host syntax, based on
ngx_http_parse_request_line(). The following is now rejected:
- the rest of gen-delims "#", "?", "@", "[", "]"
- other unwise delims <">, "<", ">", "\", "^", "`', "{", "|", "}"
- IP literals with a trailing dot, missing closing bracket, or pct-encoded
- a port subcomponent with invalid values
- characters in upper half
Diffstat (limited to 'src/http/modules')
0 files changed, 0 insertions, 0 deletions