upstream/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2026-04-23 15:19:36 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge c9a51bc48a into 067d766f21

Browse source
This commit is contained in:
Sajad Rahimi 2026-04-06 11:39:43 -04:00 committed by GitHub
commit 9290f777aa
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
src/http/ngx_http_parse.c
View file

@ -1000,7 +1000,17 @@ ngx_http_parse_header_line(ngx_http_request_t *r, ngx_buf_t *b,
break;
}
if (ch <= 0x20 || ch == 0x7f) {
if (ch <= 0x20
|| ch == 0x22
|| ch == 0x28
|| ch == 0x29
|| ch == 0x2c
|| ch == 0x2f
|| (ch >= 0x3b && ch <= 0x40)
|| (ch >= 0x5b && ch <= 0x5d)
|| ch == 0x7b
|| ch == 0x7d)
{
r->header_end = p;
return NGX_HTTP_PARSE_INVALID_HEADER;
}