[PATCH] Add strict Host validation
sb at nginx.com
Tue Jan 13 12:43:33 UTC 2015
> On 13 Jan 2015, at 02:45, Piotr Sikora <piotr at cloudflare.com> wrote:
> $ curl -I nginx.org -H"Host: \$"
> curl: (52) Empty reply from server
> You cannot possibly tell me that's correct and/or expected behavior?
> And that's not even a control character.
Yes, that is expected behaviour, from nginx.conf:
listen 80 default_server;
More information about the nginx-devel