The official NGINX Open Source repository.
Go to file
Maxim Dounin ce05841eef Cache: check the whole cache key in addition to hashes.
This prevents a potential attack that discloses cached data if an attacker
will be able to craft a hash collision between some cache key the attacker
is allowed to access and another cache key with protected data.

See http://mailman.nginx.org/pipermail/nginx-devel/2015-September/007288.html.

Thanks to Gena Makhomed and Sergey Brester.
2015-09-11 17:03:56 +03:00
auto Stream: connection limiting module. 2015-06-18 14:17:30 +03:00
conf Added the REQUEST_SCHEME parameter. 2015-06-05 22:23:26 +03:00
contrib Contrib: add more directives to vim syntax. 2014-10-22 15:31:19 +02:00
docs nginx-1.9.4-RELEASE 2015-08-18 18:16:17 +03:00
misc Updated OpenSSL used for win32 builds. 2015-08-17 18:09:20 +03:00
src Cache: check the whole cache key in addition to hashes. 2015-09-11 17:03:56 +03:00
.hgtags release-1.9.4 tag 2015-08-18 18:16:17 +03:00