Ticket #2396: encoded-deny.patch

src/http/ngx_http_parse.c

@@ -1526 +1526 @@
                     ch = *p++;
                     break;
 
-                } else if (ch == '\0') {
+                } else if (ch < 0x20 || ch == 0x7f) {
                     return NGX_HTTP_PARSE_INVALID_REQUEST;
                 }
 
@@ -1546 +1546 @@
 
                 } else if (ch == '+') {
                     r->plus_in_uri = 1;
+                } else if (ch < 0x20 || ch == 0x7f) {
+                    return NGX_HTTP_PARSE_INVALID_REQUEST;
                 }
 
                 state = quoted_state;