Welcome! Log In Create A New Profile

Advanced

Re: Request Method Using Mixed case letters.

Maxim Dounin
January 13, 2021 08:28AM
Hello!

On Wed, Jan 13, 2021 at 01:04:26AM -0500, sanjay9999 wrote:

> Thanks for the update.
> I have already taken care to hide the "nginx".

The links I've provided explain why you shouldn't do this. In
particular, because this has nothing to do with security, and
because it is an easy way to say "thanks" to the developers,
including me.

> With CAPITAL letters, my testcase using "POSTSSS" for request_method, works
> fine.However, for mixed-case and small-case , nginx default rule applies and
> control does not reach my server block. hence I end up getting 400 error
> with "nginx" server name in html response.

Trying to hide "nginx" everywhere, including response headers and
error pages, will at least require 3rd party modules to do so, as
well as non-trivial and error prone error_page configuration. I
would not recommend doing this.

If you insist on not saying "thanks", the most simple available
option is to use 'server_tokens "";' as recommended by the
previous message (and available in the commercial version).

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Request Method Using Mixed case letters.

sanjay9999 January 12, 2021 04:10AM

Re: Request Method Using Mixed case letters.

sanjay9999 January 12, 2021 04:21AM

Re: Request Method Using Mixed case letters.

Maxim Dounin January 12, 2021 08:38AM

Re: Request Method Using Mixed case letters.

sanjay9999 January 13, 2021 01:04AM

Re: Request Method Using Mixed case letters.

sanjay9999 January 13, 2021 01:07AM

Re: Request Method Using Mixed case letters.

Maxim Dounin January 13, 2021 08:28AM

Re: Request Method Using Mixed case letters.

Jeffrey 'jf' Lim January 13, 2021 09:02AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 80
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready