]> git.kaiwu.me - njs.git/commit
projects / njs.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 317fe7f) | patch
Fetch: reject unsafe request methods
authorDmitry Volyntsev <xeioex@nginx.com>
Fri, 29 May 2026 22:58:34 +0000 (15:58 -0700)
committerDmitry Volyntsev <xeioexception@gmail.com>
Mon, 1 Jun 2026 15:44:59 +0000 (08:44 -0700)
commit5ee6e0763e6a16a89d429edf8d8d587c691ed5cc
treebf77a9b6f29a5ddeb69e65190e57babc76060a18tree | snapshot
parent317fe7ff422ef8175c398449c8bb9b17446826ffcommit | diff
Fetch: reject unsafe request methods

Reject empty methods, C0 control bytes, space, and DEL before a fetch
request can be serialized.  Preserve existing forbidden-method checks,
common-method normalization, and valid server-side extension methods.
nginx/ngx_js_fetch.c diff | blob | history
nginx/ngx_js_http.c diff | blob | history
nginx/ngx_js_http.h diff | blob | history
nginx/ngx_qjs_fetch.c diff | blob | history
nginx/t/js_fetch_objects.t diff | blob | history
njs upstream