nginx.git - nginx

Age	Commit message (Collapse)	Author	Files	Lines
2017-08-22	Secure link: fixed stack buffer overflow.	Roman Arutyunyan	1	-2/+1
	When secure link checksum has length of 23 or 24 bytes, decoded base64 value could occupy 17 or 18 bytes which is more than 16 bytes previously allocated for it on stack. The buffer overflow does not have any security implications since only one local variable was corrupted and this variable was not used in this case. The fix is to increase buffer size up to 18 bytes. Useless buffer size initialization is removed as well.
2013-01-28	Secure_link: fixed configuration inheritance.	Ruslan Ermilov	1	-2/+15
	The "secure_link_secret" directive was always inherited from the outer configuration level even when "secure_link" and "secure_link_md5" were specified on the inner level.
2012-01-18	Copyright updated.	Maxim Konovalov	1	-0/+1

2010-09-13	fix typo	Igor Sysoev	1	-2/+2

2010-09-06	discard "secure_link_expires on\|off"	Igor Sysoev	1	-25/+11

2010-09-02	new ngx_http_secure_link_module with secure_link, secure_link_md5, and	Igor Sysoev	1	-12/+187
	secure_link_expires
2009-06-02	return NULL instead of NGX_CONF_ERROR on a create conf failure	Igor Sysoev	1	-1/+1

2008-10-21	allow short secure links	Igor Sysoev	1	-1/+1

2008-09-27	ngx_http_secure_link_module	Igor Sysoev	1	-0/+193