mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2024-12-01 11:19:00 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

disable TRACE method

Browse Source
This commit is contained in:
Igor Sysoev 2007-03-30 18:59:26 +00:00
parent 9b6548f4e4
commit 3e933d2919
3 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/http/ngx_http_parse.c
View File

@ -146,6 +146,12 @@ ngx_http_parse_request_line(ngx_http_request_t *r, ngx_buf_t *b)
r->method = NGX_HTTP_MKCOL;
}
if (m[0] == 'T' && m[1] == 'R'
&& m[2] == 'A' && m[3] == 'C' && m[4] == 'E')
{
r->method = NGX_HTTP_TRACE;
}
break;
case 6:

7
src/http/ngx_http_request.c
View File

@ -1267,6 +1267,13 @@ ngx_http_process_request_header(ngx_http_request_t *r)
return NGX_ERROR;
}
if (r->method & (NGX_HTTP_TRACE)) {
ngx_log_error(NGX_LOG_INFO, r->connection->log, 0,
"client sent TRACE method");
ngx_http_finalize_request(r, NGX_HTTP_NOT_ALLOWED);
return NGX_ERROR;
}
if (r->headers_in.transfer_encoding
&& ngx_strstr(r->headers_in.transfer_encoding->value.data, "chunked"))
{

1
src/http/ngx_http_request.h
View File

@ -37,6 +37,7 @@
#define NGX_HTTP_PROPPATCH 0x0800
#define NGX_HTTP_LOCK 0x1000
#define NGX_HTTP_UNLOCK 0x2000
#define NGX_HTTP_TRACE 0x4000
#define NGX_HTTP_CONNECTION_CLOSE 1
#define NGX_HTTP_CONNECTION_KEEP_ALIVE 2