diff options
| author | Igor Sysoev <igor@sysoev.ru> | 2007-03-30 18:59:26 +0000 |
|---|---|---|
| committer | Igor Sysoev <igor@sysoev.ru> | 2007-03-30 18:59:26 +0000 |
| commit | 3e933d2919ed7672127e4bd766f213c75a6ea3c4 (patch) | |
| tree | bf39b0fd163a28a35afb6225b7af963653fac605 /src/http/ngx_http_request.c | |
| parent | 9b6548f4e4eda4cf38c4274a9a8c45efe53b6d9c (diff) | |
| download | nginx-3e933d2919ed7672127e4bd766f213c75a6ea3c4.tar.gz nginx-3e933d2919ed7672127e4bd766f213c75a6ea3c4.zip | |
disable TRACE method
Diffstat (limited to 'src/http/ngx_http_request.c')
| -rw-r--r-- | src/http/ngx_http_request.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/src/http/ngx_http_request.c b/src/http/ngx_http_request.c index afc1d644d..1a2e1bc27 100644 --- a/src/http/ngx_http_request.c +++ b/src/http/ngx_http_request.c @@ -1267,6 +1267,13 @@ ngx_http_process_request_header(ngx_http_request_t *r) return NGX_ERROR; } + if (r->method & (NGX_HTTP_TRACE)) { + ngx_log_error(NGX_LOG_INFO, r->connection->log, 0, + "client sent TRACE method"); + ngx_http_finalize_request(r, NGX_HTTP_NOT_ALLOWED); + return NGX_ERROR; + } + if (r->headers_in.transfer_encoding && ngx_strstr(r->headers_in.transfer_encoding->value.data, "chunked")) { |