Opened 10 years ago
Closed 10 years ago
#605 closed enhancement (wontfix)
Configuration check for ngx_http_rewrite_module only
| Reported by: | Martynas Bendorius | Owned by: | |
|---|---|---|---|
| Priority: | major | Milestone: | |
| Component: | nginx-core | Version: | 1.7.x |
| Keywords: | Cc: | ||
| uname -a: | |||
| nginx -V: | 1.7.4 | ||
Description
It would be nice if nginx had ability to check if configuration file includes ngx_http_rewrite_module directives only, so that web hosting control panels could securely offer users ability to add rewrite rules to nginx configuration files. More info: http://forum.nginx.org/read.php?10,252595
Note:
See TracTickets
for help on using tickets.
It might be better idea to filter directives you want to allow using the control panel itself. Or even generate from some additional metainformation.
Note well that regular expressions can be easily constructed to consume resources (see catastrophic backtracking), and it might not be a good idea to allow users to supply arbitrary rewrite module directives.