Ticket #196 followup: disallow spaces in uri by default

Lukas Tribus luky-37 at hotmail.com
Sat Apr 8 19:26:01 UTC 2017

Hello list,

in Ticket #196 [1], Maxim Dounin suggested that spaces in URI's could be disallowed by default.

As far as I can tell, current code still does not "disallow" those requests (not by default and not via specific configuration either), is that correct? Could this be improved, as per the suggestion in the ticket?

Nginx' behavior looks weird and inconsistent in case the HTTP request contains a unescaped "space followed by a uppercase H" and troubleshooting is more complicated because of it, take a look at this for example:



[1] https://trac.nginx.org/nginx/ticket/196

More information about the nginx mailing list