This commit is contained in:
Sajad Rahimi 2025-12-17 00:38:20 +00:00 committed by GitHub
commit 233acf90e8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 11 additions and 1 deletions

View File

@ -996,7 +996,17 @@ ngx_http_parse_header_line(ngx_http_request_t *r, ngx_buf_t *b,
break;
}
if (ch <= 0x20 || ch == 0x7f) {
if (ch <= 0x20
|| ch == 0x22
|| ch == 0x28
|| ch == 0x29
|| ch == 0x2c
|| ch == 0x2f
|| (ch >= 0x3b && ch <= 0x40)
|| (ch >= 0x5b && ch <= 0x5d)
|| ch == 0x7b
|| ch == 0x7d)
{
r->header_end = p;
return NGX_HTTP_PARSE_INVALID_HEADER;
}