Path normalization controls
Offen
#6,589
17 Kommentare
1 Reaktion
2 zugewiesene Personen
Beansprucht von @chaoqin-li1123
Auf GitHub ansehen
area/security
help wanted
priority/high
tech debt
- Vorherrschende Sprache
- C++
- Sterne
- 28.9k
- Forks
- 5.6k
- Ø Merge
- 1 T. 22 Std.
- Gemergte PRs (30 T.)
- 430
Beschreibung
The fix for CVE-2019-9900, provided a coarse grained ability to opt-in/out of path normalization. That is, you could either normalize, in which case both normalization was used for matching and transforming the path to the upstream, or not normalize.
Ideally we provide finer grained controls similar to Nginx, where users can opt to normalize for match independent of transforming the path to the upstream.
CC @PiotrSikora
Action item for CVE-2019-9901
Beitragsleitfaden
Bewertung
Dieses Issue wurde noch nicht bewertet.