An official read-only mirror of http://hg.nginx.org/nginx/ which is updated hourly. Pull requests on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes to nginx is via the nginx development mailing list, see http://nginx.org/en/docs/contributing_changes.html
Go to file
Maxim Dounin ce05841eef Cache: check the whole cache key in addition to hashes.
This prevents a potential attack that discloses cached data if an attacker
will be able to craft a hash collision between some cache key the attacker
is allowed to access and another cache key with protected data.

See http://mailman.nginx.org/pipermail/nginx-devel/2015-September/007288.html.

Thanks to Gena Makhomed and Sergey Brester.
2015-09-11 17:03:56 +03:00
auto Stream: connection limiting module. 2015-06-18 14:17:30 +03:00
conf Added the REQUEST_SCHEME parameter. 2015-06-05 22:23:26 +03:00
contrib Contrib: add more directives to vim syntax. 2014-10-22 15:31:19 +02:00
docs nginx-1.9.4-RELEASE 2015-08-18 18:16:17 +03:00
misc Updated OpenSSL used for win32 builds. 2015-08-17 18:09:20 +03:00
src Cache: check the whole cache key in addition to hashes. 2015-09-11 17:03:56 +03:00
.hgtags release-1.9.4 tag 2015-08-18 18:16:17 +03:00