[PATCH] Add strict Host validation
luky-37 at hotmail.com
Sat Dec 20 18:49:42 UTC 2014
> I can't think of any reason why would you intentionally allow
> control characters in there.
I fully agree.
> What about host names in national alphabets?
Its not in the standard, to what end exactly would we
allow such characters?
It will just encourage users to use non-standard hostname which
will break in a lot of browser, forward and reverse proxies.
IDN is the proper way to do special characters in domain names
and it works with the entire Unicode spectrum in a standardized
I don't see any reason to allow a Hostname that cannot even be
published via DNS in the first place.
More information about the nginx-devel