Browse Source

Possible HTTP-Splitting vulnerability

Problem: [http_splitting] Possible HTTP-Splitting vulnerability.
Description: Using variables that can contain "\n" may lead to http injection.
Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/httpsplitting.md
Reason: At least variable "$uri" can contain "\n"
pull/33/head
Jeremy MANSON 9 years ago
committed by GitHub
parent
commit
e6bad9f5a4
  1. 2
      conf/nginx.conf

2
conf/nginx.conf

@ -38,7 +38,7 @@ location ^~ #LOCATION# {
#rewrite ^/.well-known/host-meta.json #PATH#/public.php?service=host-meta-json last; #rewrite ^/.well-known/host-meta.json #PATH#/public.php?service=host-meta-json last;
location #LOCATION# { location #LOCATION# {
rewrite ^ #PATH#/index.php$uri;
rewrite ^ #PATH#/index.php$request_uri;
} }
location = #PATH#/robots.txt { location = #PATH#/robots.txt {

Loading…
Cancel
Save