[nginx] A bounds check of %N format on Windows.

2015-01-27 Thread Igor Sysoev
details: http://hg.nginx.org/nginx/rev/78271500b8de branches: changeset: 5965:78271500b8de user: Igor Sysoev date: Tue Jan 27 15:38:15 2015 +0300 description: A bounds check of %N format on Windows. Thanks to Joe Bialek, Adam Zabrocki and Microsoft Vulnerability Research. diffstat:

[PATCH] set $https for use behind SSL-stripping load-balancer

2015-01-27 Thread Alex Wilson
Currently when using nginx behind an SSL-stripping load-balancer, there is no way to control the scheme used when generating directory redirects. By this I mean, if you are serving a static directory tree and you visit the URL of a directory without the trailing / (eg https://example.com/foo), y