[nginx] Disabled multiple Transfer-Encoding headers.

Maxim Dounin mdounin at mdounin.ru
Thu Feb 20 15:55:03 UTC 2020


details:   https://hg.nginx.org/nginx/rev/aca005d232ff
branches:  
changeset: 7625:aca005d232ff
user:      Maxim Dounin <mdounin at mdounin.ru>
date:      Thu Feb 20 16:19:29 2020 +0300
description:
Disabled multiple Transfer-Encoding headers.

We anyway do not support more than one transfer encoding, so accepting
requests with multiple Transfer-Encoding headers doesn't make sense.
Further, we do not handle multiple headers, and ignore anything but
the first header.

Reported by Filippo Valsorda.

diffstat:

 src/http/ngx_http_request.c |  2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diffs (12 lines):

diff --git a/src/http/ngx_http_request.c b/src/http/ngx_http_request.c
--- a/src/http/ngx_http_request.c
+++ b/src/http/ngx_http_request.c
@@ -131,7 +131,7 @@ ngx_http_header_t  ngx_http_headers_in[]
 
     { ngx_string("Transfer-Encoding"),
                  offsetof(ngx_http_headers_in_t, transfer_encoding),
-                 ngx_http_process_header_line },
+                 ngx_http_process_unique_header_line },
 
     { ngx_string("TE"),
                  offsetof(ngx_http_headers_in_t, te),


More information about the nginx-devel mailing list