details: http://hg.nginx.org/nginx/rev/78271500b8de
branches:
changeset: 5965:78271500b8de
user: Igor Sysoev
date: Tue Jan 27 15:38:15 2015 +0300
description:
A bounds check of %N format on Windows.
Thanks to Joe Bialek, Adam Zabrocki and Microsoft Vulnerability Research.
diffstat:
Currently when using nginx behind an SSL-stripping load-balancer, there is no
way to control the scheme used when generating directory redirects. By this I
mean, if you are serving a static directory tree and you visit the URL of a
directory without the trailing / (eg https://example.com/foo), y