mirror of
https://github.com/nginx/nginx.git
synced 2025-06-12 13:42:55 +08:00
Improved access log escaping to better protect other software.
Some character sets (notably ISO-8859-1) have C1 control characters in upper half, make sure to escape them. Reported by Jesus Olmos Gonzalez.
This commit is contained in:
parent
0d19f020ba
commit
e3d6c5a33c
@ -690,12 +690,12 @@ ngx_http_log_escape(u_char *dst, u_char *src, size_t size)
|
|||||||
0x10000000, /* 0001 0000 0000 0000 0000 0000 0000 0000 */
|
0x10000000, /* 0001 0000 0000 0000 0000 0000 0000 0000 */
|
||||||
|
|
||||||
/* ~}| {zyx wvut srqp onml kjih gfed cba` */
|
/* ~}| {zyx wvut srqp onml kjih gfed cba` */
|
||||||
0x00000000, /* 0000 0000 0000 0000 0000 0000 0000 0000 */
|
0x80000000, /* 1000 0000 0000 0000 0000 0000 0000 0000 */
|
||||||
|
|
||||||
0x00000000, /* 0000 0000 0000 0000 0000 0000 0000 0000 */
|
0xffffffff, /* 1111 1111 1111 1111 1111 1111 1111 1111 */
|
||||||
0x00000000, /* 0000 0000 0000 0000 0000 0000 0000 0000 */
|
0xffffffff, /* 1111 1111 1111 1111 1111 1111 1111 1111 */
|
||||||
0x00000000, /* 0000 0000 0000 0000 0000 0000 0000 0000 */
|
0xffffffff, /* 1111 1111 1111 1111 1111 1111 1111 1111 */
|
||||||
0x00000000, /* 0000 0000 0000 0000 0000 0000 0000 0000 */
|
0xffffffff, /* 1111 1111 1111 1111 1111 1111 1111 1111 */
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user