[PATCH] Add strict Host validation

Sergey Budnevitch sb at nginx.com
Tue Jan 13 12:43:33 UTC 2015


> On 13 Jan 2015, at 02:45, Piotr Sikora <piotr at cloudflare.com> wrote:
> 
> $ curl -I nginx.org -H"Host: \$"
> curl: (52) Empty reply from server
> 
> You cannot possibly tell me that's correct and/or expected behavior?
> And that's not even a control character.

Yes, that is expected behaviour, from nginx.conf:

server {
      listen       80 default_server;
      return       444;
}



More information about the nginx-devel mailing list