Commitb788ce2

ahuango

authored and

Felipe Zimmerle

committed

Clean the garbage character after the duplicated charset property

Pull requestmicrosoft#148 by zimmerle doesn't fix the problem. '\0' in formatstring won't be processed by "ngx_vslprintf".When the garbage character is '\n' or '\r', http response is cracked andbrowsers may go crashing.

1 parent74ec784 commitb788ce2Copy full SHA for b788ce2

File tree

1 file changed

-1

lines changed

nginx/modsecurity
- ngx_http_modsecurity.c

1 file changed

-1

lines changed

`‎nginx/modsecurity/ngx_http_modsecurity.c‎`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -615,7 +615,7 @@ ngx_http_modsecurity_load_headers_out(ngx_http_request_t *r)`
`615`	`615`	`}`
`616`	`616`
`617`	`617`	`ngx_snprintf(content_type,content_type_len,`
`618`		`-"%V; charset=%V\0",`
	`618`	`+"%V; charset=%V%Z",`
`619`	`619`	`&r->headers_out.content_type,`
`620`	`620`	`&r->headers_out.charset);`
`621`	`621`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commitb788ce2

File tree

1 file changed

1 file changed

`‎nginx/modsecurity/ngx_http_modsecurity.c‎`

0 commit comments