Changes between Version 1 and Version 2 of Ticket #2396


Ignore:
Timestamp:
10/01/22 13:00:51 (19 months ago)
Author:
ymartin-ovh@…
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #2396 – Description

    v1 v2  
    55We have a configuration that use $uri and with the config below, we can trick nginx and change request body:
    66
    7 
     7{{{
    88server {
    99   listen 127.0.0.1:80;
    … …  
    2626   return 418;
    2727}
     28}}}
    2829
     30{{{
    2931curl -v 'http://localhost/toto' => < HTTP/1.1 200 OK
    3032
    … …  
    4244< Connection: keep-alive
    4345<
    44 * Connection #0 to host localhost left intact
     46}}}
    4547
    4648The attached patch tries to mimic fix on the commit 0b66bd4be777a5b79c5ae0e7dff89fc6429da0fe.
    4749
     50{{{
    4851Same crafted curl gives me now:
    4952< HTTP/1.1 400 Bad Request
    5053< Server: nginx/1.21.6
     54}}}
    5155
    5256What do you think ?