mirror of
https://github.com/nginx/nginx.git
synced 2024-11-27 15:39:01 +08:00
merge 2411:
handle "/../" case more reliably
This commit is contained in:
parent
06b8301307
commit
a558afd8e9
@ -1123,11 +1123,15 @@ ngx_http_parse_complex_uri(ngx_http_request_t *r, ngx_uint_t merge_slashes)
|
||||
#endif
|
||||
case '/':
|
||||
state = sw_slash;
|
||||
u -= 4;
|
||||
if (u < r->uri.data) {
|
||||
return NGX_HTTP_PARSE_INVALID_REQUEST;
|
||||
}
|
||||
while (*(u - 1) != '/') {
|
||||
u -= 5;
|
||||
for ( ;; ) {
|
||||
if (u < r->uri.data) {
|
||||
return NGX_HTTP_PARSE_INVALID_REQUEST;
|
||||
}
|
||||
if (*u == '/') {
|
||||
u++;
|
||||
break;
|
||||
}
|
||||
u--;
|
||||
}
|
||||
break;
|
||||
|
Loading…
Reference in New Issue
Block a user