details: https://hg.nginx.org/nginx/rev/5a3426683251
branches:
changeset: 7577:5a3426683251
user: Ruslan Ermilov <ru@nginx.com>
date: Tue Oct 08 21:56:14 2019 +0300
description:
Improved detection of broken percent encoding in URI.
diffstat:
src/http/ngx_http_parse.c | 4 ++++
1 files changed, 4 insertions(+), 0 deletions(-)
diffs (14 lines):
diff -r 7fdcf308e0f0 -r 5a3426683251 src/http/ngx_http_parse.c
--- a/src/http/ngx_http_parse.c Mon Sep 30 16:39:20 2019 +0300
+++ b/src/http/ngx_http_parse.c Tue Oct 08 21:56:14 2019 +0300
@@ -1561,6 +1561,10 @@ ngx_http_parse_complex_uri(ngx_http_requ
}
}
+ if (state == sw_quoted || state == sw_quoted_second) {
+ return NGX_HTTP_PARSE_INVALID_REQUEST;
+ }
+
done:
r->uri.len = u - r->uri.data;
_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-devel
