Opened 6 years ago

Closed 6 years ago

#605 closed enhancement (wontfix)

Configuration check for ngx_http_rewrite_module only

Reported by: Martynas Bendorius Owned by:
Priority: major Milestone:
Component: nginx-core Version: 1.7.x
Keywords: Cc:
uname -a:
nginx -V: 1.7.4

Description

It would be nice if nginx had ability to check if configuration file includes ngx_http_rewrite_module directives only, so that web hosting control panels could securely offer users ability to add rewrite rules to nginx configuration files. More info: http://forum.nginx.org/read.php?10,252595

Change History (1)

comment:1 by Maxim Dounin, 6 years ago

Resolution: wontfix
Status: newclosed

It might be better idea to filter directives you want to allow using the control panel itself. Or even generate from some additional metainformation.

Note well that regular expressions can be easily constructed to consume resources (see catastrophic backtracking), and it might not be a good idea to allow users to supply arbitrary rewrite module directives.

Note: See TracTickets for help on using tickets.