Fijxu/nginx-quic
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix "/dir/%3F../" and "/dir/%23../" cases

Browse source
This commit is contained in:
Igor Sysoev 2010-06-04 16:05:55 +00:00
parent 7d26dffc7d
commit 0ff90bffc8
1 changed files with 3 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
src/http/ngx_http_parse.c
View file

@ -1187,16 +1187,11 @@ ngx_http_parse_complex_uri(ngx_http_request_t *r, ngx_uint_t merge_slashes)
if (ch >= '0' && ch <= '9') { if (ch >= '0' && ch <= '9') {
ch = (u_char) ((decoded << 4) + ch - '0'); ch = (u_char) ((decoded << 4) + ch - '0');
if (ch == '%') { if (ch == '%' || ch == '#') {
state = sw_usual; state = sw_usual;
*u++ = ch; *u++ = ch;
ch = *p++; ch = *p++;
break; break;
}
if (ch == '#') {
*u++ = ch;
ch = *p++;
} else if (ch == '\0') { } else if (ch == '\0') {
return NGX_HTTP_PARSE_INVALID_REQUEST; return NGX_HTTP_PARSE_INVALID_REQUEST;
@ -1211,8 +1206,10 @@ ngx_http_parse_complex_uri(ngx_http_request_t *r, ngx_uint_t merge_slashes)
ch = (u_char) ((decoded << 4) + c - 'a' + 10); ch = (u_char) ((decoded << 4) + c - 'a' + 10);
if (ch == '?') { if (ch == '?') {
state = sw_usual;
*u++ = ch; *u++ = ch;
ch = *p++; ch = *p++;
break;
} else if (ch == '+') { } else if (ch == '+') {
r->plus_in_uri = 1; r->plus_in_uri = 1;