Maxim Dounin ce05841eef Cache: check the whole cache key in addition to hashes. ...

This prevents a potential attack that discloses cached data if an attacker
will be able to craft a hash collision between some cache key the attacker
is allowed to access and another cache key with protected data.

See http://mailman.nginx.org/pipermail/nginx-devel/2015-September/007288.html.

Thanks to Gena Makhomed and Sergey Brester.

2015-09-11 17:03:56 +03:00

auto

Stream: connection limiting module.

2015-06-18 14:17:30 +03:00

conf

Added the REQUEST_SCHEME parameter.

2015-06-05 22:23:26 +03:00

contrib

Contrib: add more directives to vim syntax.

2014-10-22 15:31:19 +02:00

docs

nginx-1.9.4-RELEASE

2015-08-18 18:16:17 +03:00

misc

Updated OpenSSL used for win32 builds.

2015-08-17 18:09:20 +03:00

src

Cache: check the whole cache key in addition to hashes.

2015-09-11 17:03:56 +03:00

.hgtags

release-1.9.4 tag

2015-08-18 18:16:17 +03:00

Description

An official read-only mirror of http://hg.nginx.org/nginx/ which is updated hourly. Pull requests on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes to nginx is via the nginx development mailing list, see http://nginx.org/en/docs/contributing_changes.html

78 MiB

Languages

C 97.6%

Vim Script 1.8%

XS 0.4%

Perl 0.1%