mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2024-12-16 06:09:00 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
6000f4ad6d
nginx/src/http
History
Valentin Bartenev 6000f4ad6d SNI: reset to default server if requested host was not found. 
Not only this is consistent with a case without SNI, but this also
prevents abusing configurations that assume that the $host variable
is limited to one of the configured names for a server.

An example of potentially unsafe configuration:

  server {
      listen 443 ssl default_server;
      ...
  }

  server {
      listen 443;
      server_name example.com;

      location / {
          proxy_pass http://$host;
      }
  }

Note: it is possible to negotiate "example.com" by SNI, and to request
arbitrary host name that does not exist in the configuration above.
2013-02-27 17:38:54 +00:00
..
modules Correctly handle multiple X-Forwarded-For headers (ticket #106). 2013-02-27 13:29:50 +00:00
ngx_http_busy_lock.c Whitespace fixes. 2012-03-05 18:09:06 +00:00
ngx_http_busy_lock.h Copyright updated. 2012-01-18 15:07:43 +00:00
ngx_http_cache.h Copyright updated. 2012-01-18 15:07:43 +00:00
ngx_http_config.h Copyright updated. 2012-01-18 15:07:43 +00:00
ngx_http_copy_filter_module.c Local variable "ngx_http_next_filter" renamed to "ngx_http_next_body_filter" 2012-03-15 20:08:58 +00:00
ngx_http_core_module.c Introduced the ngx_http_set_connection_log() macro. 2013-02-27 16:56:47 +00:00
ngx_http_core_module.h The default server lookup is now done only once per connection. 2013-02-27 16:53:01 +00:00
ngx_http_file_cache.c Removed zero termination of shm zone names. 2013-02-19 17:48:45 +00:00
ngx_http_header_filter_module.c Proxy: support for connection upgrade (101 Switching Protocols). 2013-02-18 13:50:52 +00:00
ngx_http_parse_time.c Fixed compilation with -Wmissing-prototypes. 2012-07-24 15:09:54 +00:00
ngx_http_parse.c Request body: adjust b->pos when chunked parsing done. 2012-11-21 01:02:56 +00:00
ngx_http_postpone_filter_module.c Local variable "ngx_http_next_filter" renamed to "ngx_http_next_body_filter" 2012-03-15 20:08:58 +00:00
ngx_http_request_body.c Request body: fixed client_body_in_file_only. 2013-02-01 14:38:18 +00:00
ngx_http_request.c SNI: reset to default server if requested host was not found. 2013-02-27 17:38:54 +00:00
ngx_http_request.h SNI: avoid surplus lookup of virtual server if SNI was used. 2013-02-27 17:33:59 +00:00
ngx_http_script.c Allow the complex value to be defined as an empty string. 2012-12-06 23:03:53 +00:00
ngx_http_script.h Copyright updated. 2012-01-18 15:07:43 +00:00
ngx_http_special_response.c Request body: improved handling of incorrect chunked request body. 2012-11-26 18:00:14 +00:00
ngx_http_upstream_round_robin.c Fixed "proxy_pass" with IP address and no port (ticket #276). 2013-01-10 12:58:55 +00:00
ngx_http_upstream_round_robin.h Upstream: weights support in ip_hash balancer. 2012-06-03 23:22:41 +00:00
ngx_http_upstream.c Proxy: fixed do_write handling in previous commit. 2013-02-18 15:08:46 +00:00
ngx_http_upstream.h Proxy: support for connection upgrade (101 Switching Protocols). 2013-02-18 13:50:52 +00:00
ngx_http_variables.c Correctly handle multiple X-Forwarded-For headers (ticket #106). 2013-02-27 13:29:50 +00:00
ngx_http_variables.h Copyright updated. 2012-01-18 15:07:43 +00:00
ngx_http_write_filter_module.c Limit rate: fixed integer overflow in limit calculation (ticket #256). 2012-12-12 14:48:48 +00:00
ngx_http.c Fixed sorting of listen addresses so that wildcard address is always at 2012-07-17 04:47:34 +00:00
ngx_http.h SNI: reuse selected configuration for all requests in a connection. 2013-02-27 17:12:48 +00:00