Don't know if found by someone else, but I find this bug today in
autoindex module.

Basically, the file/dirname is not escaped properly.

To reproduce:
- enable autoindex in a directory
- create file with name "some<em>thing" in the directory
- view the (broken) directory list in web

--
O< ascii ribbon campaign - stop html mail - www.asciiribbon.org

_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx