polaru commented on issue #10517:
URL: https://github.com/apache/apisix/issues/10517#issuecomment-1819306131

   My upstream is a php webserver and it doesn't execute arbitrary code. But 
your question makes me believe it wasn't very clear what I was asking for, so 
I'll try to explain it again.
   
   Normally this is what it looks like:
   ```
   $ curl https://api.example.com/health_check.php
   pass%    
   ```
   But if somebody does fatfinger something on the webserver and this is what 
the healthcheck returns instead:
   ```
   $ curl https://api.example.com/health_check.php
   <?php
   echo 'p', 'a', 's', 's';
   ```
   I want the loadbalancer to fail the backend because it means it's likely the 
code of other php files might be served directly, instead of the interpreted 
content.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to