Opened 13 months ago
Closed 13 months ago
#2474 closed defect (invalid)
Why is the rewritten uri not validated?
| Reported by: | 志道 洪 | Owned by: | |
|---|---|---|---|
| Priority: | minor | Milestone: | nginx-1.23.4 |
| Component: | documentation | Version: | 1.19.x |
| Keywords: | Cc: | 志道 洪 | |
| uname -a: | nobody | ||
| nginx -V: | 1.19 | ||
Description
Hi, I have a question about the nginx rewrite directive.
It's allowed to config any rewritten value in nginx, for example:
server {
listen 8080;
rewrite .*$ "invalid url" break;
location ~ .* {
return 200 $uri;
}
}
Does it mean it's unnecessary to validate URL in nginx? Thanks.
Note:
See TracTickets
for help on using tickets.
In general, nginx does what is written in the configuration, even if it's invalid from protocol point of view and/or for some other reason. Correctness of the result is therefore responsibility of the author of the configuration. In some cases this makes it possible to do things which aren't otherwise possible: note that the configuration snippet you've provided actually works.