Looks like this affected Windows only, and was fixed a while ago.

Changes with nginx 0.7.65                                        01 Feb 2010

    *) Security: now nginx/Windows ignores trailing spaces in URI.
       Thanks to Dan Crowley, Core Security Technologies. 

-----Original Message-----
From: [email protected] [mailto:[email protected]] 
Sent: Monday, May 31, 2010 11:00 AM
To: [email protected]
Subject: Re: Nginx 0.8.35 Space Character Remote Source Disclosure

what about the stable branch? Versions 0.7.65 and earlier?

Reply via email to