Piotr Sikora
June 07, 2011 12:06PM
Hi,

> Also, for headers like "X-Forwarded-For", attackers can intentionaly
> inject serveral spoofed ip addresses.

Of course, that's why you should _never_ trust the data that comes from the
systems outside of your control.

Best regards,
Piotr Sikora < piotr.sikora@frickle.com >


_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx
Subject Author Posted

Feature Request: write error logs when detecting duplicate http headers

杨镭 June 07, 2011 11:22AM

Re: Feature Request: write error logs when detecting duplicate httpheaders

Piotr Sikora June 07, 2011 12:06PM

Re: Feature Request: write error logs when detecting duplicate http headers

Justin Cormack June 08, 2011 07:04AM

Re: Feature Request: write error logs when detecting duplicate http headers

smaer780 May 30, 2016 07:06AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 285
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready