[PATCH] Add strict Host validation

Lukas Tribus luky-37 at hotmail.com
Sat Dec 20 18:49:42 UTC 2014


> I can't think of any reason why would you intentionally allow
> control characters in there.

I fully agree.



> What about host names in national alphabets?

Its not in the standard, to what end exactly would we
allow such characters?

It will just encourage users to use non-standard hostname which
will break in a lot of browser, forward and reverse proxies.

IDN is the proper way to do special characters in domain names
and it works with the entire Unicode spectrum in a standardized
way.

I don't see any reason to allow a Hostname that cannot even be
published via DNS in the first place.


Lukas

 		 	   		  


More information about the nginx-devel mailing list