| commit | 60b5826849710f8f7bd8dbb8a31f94aef9ae6254 | |
| author | Glenn Strauss <gstrauss@gluelogic.com> | |
| Sun, 22 Oct 2017 01:44:34 +0000 (21 21:44 -0400) | ||
| committer | Glenn Strauss <gstrauss@gluelogic.com> | |
| Sun, 22 Oct 2017 01:44:34 +0000 (21 21:44 -0400) | ||
| tree | 78942beadc0eabd24172fee9470fb50c60ff8150 | treesnapshot (tar.gz zip) |
| parent | 6be68f569fdb57d5d1ebeaa1fca41736f757abf3 | commitdiff |
[core] stricter validation of request-URI begin
check that request-URI begins with '/', "http://", "https://",
or is OPTIONS * request, or else reject with 400 Bad Request unless
server.http-parseopt-header-strict = "disable" (default is enabled)
x-ref:
https://redmine.lighttpd.net/boards/3/topics/7637
check that request-URI begins with '/', "http://", "https://",
or is OPTIONS * request, or else reject with 400 Bad Request unless
server.http-parseopt-header-strict = "disable" (default is enabled)
x-ref:
https://redmine.lighttpd.net/boards/3/topics/7637
| src/request.c | diffblobblamehistory |