Ticket #196 followup: disallow spaces in uri by default
luky-37 at hotmail.com
Sat Apr 8 19:26:01 UTC 2017
in Ticket #196 , Maxim Dounin suggested that spaces in URI's could be disallowed by default.
As far as I can tell, current code still does not "disallow" those requests (not by default and not via specific configuration either), is that correct? Could this be improved, as per the suggestion in the ticket?
Nginx' behavior looks weird and inconsistent in case the HTTP request contains a unescaped "space followed by a uppercase H" and troubleshooting is more complicated because of it, take a look at this for example:
More information about the nginx