Ticket #196 followup: disallow spaces in uri by default
Lukas Tribus
luky-37 at hotmail.com
Sat Apr 8 19:26:01 UTC 2017
Hello list,
in Ticket #196 [1], Maxim Dounin suggested that spaces in URI's could be disallowed by default.
As far as I can tell, current code still does not "disallow" those requests (not by default and not via specific configuration either), is that correct? Could this be improved, as per the suggestion in the ticket?
Nginx' behavior looks weird and inconsistent in case the HTTP request contains a unescaped "space followed by a uppercase H" and troubleshooting is more complicated because of it, take a look at this for example:
https://github.com/peeringdb/peeringdb/issues/132
cheers,
lukas
[1] https://trac.nginx.org/nginx/ticket/196
More information about the nginx
mailing list