Commit Graph

1 Commits (e686f50d2a7b20c0eb01dd76d680ec58a83add30)

Author SHA1 Message Date
lijunlong 6985198d46 bugfix: ngx_http_static_module: the 'Locatoin' response header value was not properly encoded by URI rules.
This may impose security vulnerabilities for Location values from
untrusted sources.

The corresponding tests are in the lua-nginx-module repo.
5 years ago