From e64d798edb9950ef32ab98c21c190b513a3e262c Mon Sep 17 00:00:00 2001 From: Maxim Dounin Date: Thu, 20 Feb 2020 16:19:29 +0300 Subject: [PATCH] Disabled multiple Transfer-Encoding headers. We anyway do not support more than one transfer encoding, so accepting requests with multiple Transfer-Encoding headers doesn't make sense. Further, we do not handle multiple headers, and ignore anything but the first header. Reported by Filippo Valsorda. --- src/http/ngx_http_request.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/http/ngx_http_request.c b/src/http/ngx_http_request.c index 80c19656f..85c980378 100644 --- a/src/http/ngx_http_request.c +++ b/src/http/ngx_http_request.c @@ -131,7 +131,7 @@ ngx_http_header_t ngx_http_headers_in[] = { { ngx_string("Transfer-Encoding"), offsetof(ngx_http_headers_in_t, transfer_encoding), - ngx_http_process_header_line }, + ngx_http_process_unique_header_line }, { ngx_string("TE"), offsetof(ngx_http_headers_in_t, te),