Commit Graph

1 Commits (8760b0af4a8ea5a7d08a22dc00e9a4da13a8c79b)

Author SHA1 Message Date
lijunlong 6985198d46 bugfix: ngx_http_static_module: the 'Locatoin' response header value was not properly encoded by URI rules.
This may impose security vulnerabilities for Location values from
untrusted sources.

The corresponding tests are in the lua-nginx-module repo.
5 years ago