diff options
| author | Vadim Zhestikov <v.zhestikov@f5.com> | 2025-12-18 16:45:21 -0800 |
|---|---|---|
| committer | VadimZhestikov <108960056+VadimZhestikov@users.noreply.github.com> | 2026-02-12 10:52:20 -0800 |
| commit | bf0508fabfbfa2fa778edbf5b94d5c54a952156d (patch) | |
| tree | c1978a862f43a3acc585263c63a8b106ac3a667e /src/http/ngx_http_variables.c | |
| parent | f8e1bc5b9821eba7995905fe46c8ca383b5ea782 (diff) | |
| download | nginx-bf0508fabfbfa2fa778edbf5b94d5c54a952156d.tar.gz nginx-bf0508fabfbfa2fa778edbf5b94d5c54a952156d.tar.bz2 | |
Improved $cookie_ evaluation.
In case "Cookie" header is sent by client, multiple cookie pairs were
incorrectly split by a semicolon and comma.
Now they are split by a semicolon only.
For example, next variables will be found for "Cookie: a=b, c=d; e=f":
- $cookie_a: "b, c=d"
- $cookie_e: "f"
Closes #1042 on GitHub.
Diffstat (limited to 'src/http/ngx_http_variables.c')
| -rw-r--r-- | src/http/ngx_http_variables.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/http/ngx_http_variables.c b/src/http/ngx_http_variables.c index dd69bcfcd..37cd0d287 100644 --- a/src/http/ngx_http_variables.c +++ b/src/http/ngx_http_variables.c @@ -1088,7 +1088,7 @@ ngx_http_variable_cookie(ngx_http_request_t *r, ngx_http_variable_value_t *v, s.len = name->len - (sizeof("cookie_") - 1); s.data = name->data + sizeof("cookie_") - 1; - if (ngx_http_parse_multi_header_lines(r, r->headers_in.cookie, &s, &cookie) + if (ngx_http_parse_cookie_lines(r, r->headers_in.cookie, &s, &cookie) == NULL) { v->not_found = 1; |
