mirror of
https://github.com/nginx/nginx.git
synced 2024-12-22 23:23:32 -06:00
handle "/../" case more reliably
This commit is contained in:
parent
12a7d493d4
commit
97aa4c86a1
@ -1134,11 +1134,15 @@ ngx_http_parse_complex_uri(ngx_http_request_t *r, ngx_uint_t merge_slashes)
|
|||||||
#endif
|
#endif
|
||||||
case '/':
|
case '/':
|
||||||
state = sw_slash;
|
state = sw_slash;
|
||||||
u -= 4;
|
u -= 5;
|
||||||
if (u < r->uri.data) {
|
for ( ;; ) {
|
||||||
return NGX_HTTP_PARSE_INVALID_REQUEST;
|
if (u < r->uri.data) {
|
||||||
}
|
return NGX_HTTP_PARSE_INVALID_REQUEST;
|
||||||
while (*(u - 1) != '/') {
|
}
|
||||||
|
if (*u == '/') {
|
||||||
|
u++;
|
||||||
|
break;
|
||||||
|
}
|
||||||
u--;
|
u--;
|
||||||
}
|
}
|
||||||
break;
|
break;
|
||||||
|
Loading…
Reference in New Issue
Block a user