Commit Graph

1 Commits (8a4605a9338514df14b4b65e0640ab8f1447c400)

Author SHA1 Message Date
lijunlong 6985198d46 bugfix: ngx_http_static_module: the 'Locatoin' response header value was not properly encoded by URI rules.
This may impose security vulnerabilities for Location values from
untrusted sources.

The corresponding tests are in the lua-nginx-module repo.
6 years ago