diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2015-09-11 17:03:56 +0300 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2015-09-11 17:03:56 +0300 |
| commit | ce05841eefe0e6c5d18ae9b0fb8f9fbd7e99afdd (patch) | |
| tree | 90806d4643b0a7e570ed2b67b497b766b10034c0 /src/http/ngx_http_request.c | |
| parent | 51f714c85d1554ee2a1ccfe94b416e3cab6a63ad (diff) | |
| download | nginx-ce05841eefe0e6c5d18ae9b0fb8f9fbd7e99afdd.tar.gz nginx-ce05841eefe0e6c5d18ae9b0fb8f9fbd7e99afdd.zip | |
Cache: check the whole cache key in addition to hashes.
This prevents a potential attack that discloses cached data if an attacker
will be able to craft a hash collision between some cache key the attacker
is allowed to access and another cache key with protected data.
See http://mailman.nginx.org/pipermail/nginx-devel/2015-September/007288.html.
Thanks to Gena Makhomed and Sergey Brester.
Diffstat (limited to 'src/http/ngx_http_request.c')
0 files changed, 0 insertions, 0 deletions