From 8662b6bec54b138572c50d3e1fb738790ef3eb5c Mon Sep 17 00:00:00 2001
From: Igor Sysoev <igor@sysoev.ru>
Date: Fri, 13 Jul 2007 09:37:01 +0000
Subject: msie_refresh should escape at least '"' to prevent XSS

---
 src/core/ngx_string.h | 1 +
 1 file changed, 1 insertion(+)

(limited to 'src/core/ngx_string.h')

diff --git a/src/core/ngx_string.h b/src/core/ngx_string.h
index 18306d2d2..6b432d1f2 100644
--- a/src/core/ngx_string.h
+++ b/src/core/ngx_string.h
@@ -142,6 +142,7 @@ u_char *ngx_utf_cpystrn(u_char *dst, u_char *src, size_t n);
 #define NGX_ESCAPE_URI       0
 #define NGX_ESCAPE_ARGS      1
 #define NGX_ESCAPE_HTML      2
+#define NGX_ESCAPE_REFRESH   3
 
 #define NGX_UNESCAPE_URI     1
 
-- 
cgit