On 18/10/19 2:59 pm, Patrick wrote:

> The `if' part should be fine. The problem would be someone crafting a
> URL that skips past the `=' check and yet is still parsed as `id=2' by
> the underlying app.
>
> Can the underlying old app also be changed to log an attack, and throw a
> 444 when it gets an `id' set to 2?

Will check it out. Thank you for the advice.

P.V.Anthony
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx